Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/51935?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/51935?format=api", "purl": "pkg:maven/io.netty/netty@3.9-alpha0", "type": "maven", "namespace": "io.netty", "name": "netty", "version": "3.9-alpha0", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37730?format=api", "vulnerability_id": "VCID-22gb-pbnp-97gw", "summary": "DoS by CPU exhaustion when using malicious SSL packets\nThe `SslHandler` in this package allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted `SSLv2Hello` message.", "references": [ { "reference_url": "http://netty.io/news/2014/06/11/3-9-2-Final.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://netty.io/news/2014/06/11/3-9-2-Final.html" }, { "reference_url": "http://netty.io/news/2014/06/11/3.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://netty.io/news/2014/06/11/3.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3488.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3488.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3488", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00639", "scoring_system": "epss", "scoring_elements": "0.70951", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00639", "scoring_system": "epss", "scoring_elements": "0.70919", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00639", "scoring_system": "epss", "scoring_elements": "0.70961", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00639", "scoring_system": "epss", "scoring_elements": "0.70968", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3488" }, { "reference_url": "http://secunia.com/advisories/59196", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://secunia.com/advisories/59196" }, { "reference_url": "https://github.com/netty/netty", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/netty/netty" }, { "reference_url": "https://github.com/netty/netty/commit/2fa9400a59d0563a66908aba55c41e7285a04994", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/netty/netty/commit/2fa9400a59d0563a66908aba55c41e7285a04994" }, { "reference_url": "https://github.com/netty/netty/issues/2562", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/netty/netty/issues/2562" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html" }, { "reference_url": "https://snyk.io/vuln/SNYK-JAVA-ORGJBOSSNETTY-31630", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://snyk.io/vuln/SNYK-JAVA-ORGJBOSSNETTY-31630" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107983", "reference_id": "1107983", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107983" }, { "reference_url": "https://bugzilla.redhat.com/CVE-2014-3488", "reference_id": "CVE-2014-3488", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/CVE-2014-3488" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3488", "reference_id": "CVE-2014-3488", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3488" }, { "reference_url": "https://github.com/advisories/GHSA-9959-6p3m-wxpc", "reference_id": "GHSA-9959-6p3m-wxpc", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9959-6p3m-wxpc" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/199373?format=api", "purl": "pkg:maven/io.netty/netty@3.9.1.1.Final", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2v1s-fd7a-57fa" }, { "vulnerability": "VCID-bchk-2x6c-qyhm" }, { "vulnerability": "VCID-h98v-8fr5-e7a7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/io.netty/netty@3.9.1.1.Final" }, { "url": "http://public2.vulnerablecode.io/api/packages/51937?format=api", "purl": "pkg:maven/io.netty/netty@3.9.2.Final", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2v1s-fd7a-57fa" }, { "vulnerability": "VCID-bchk-2x6c-qyhm" }, { "vulnerability": "VCID-h98v-8fr5-e7a7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/io.netty/netty@3.9.2.Final" } ], "aliases": [ "CVE-2014-3488", "GHSA-9959-6p3m-wxpc" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-22gb-pbnp-97gw" } ], "fixing_vulnerabilities": [], "risk_score": "3.1", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/io.netty/netty@3.9-alpha0" }