Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/53444?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/53444?format=api", "purl": "pkg:maven/io.netty/netty-handler@4.0-alpha0", "type": "maven", "namespace": "io.netty", "name": "netty-handler", "version": "4.0-alpha0", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "4.0.37.Final", "latest_non_vulnerable_version": "4.1.94.Final", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38542?format=api", "vulnerability_id": "VCID-wtb2-m2jk-eqc2", "summary": "Infinite Loop for SSL Handler\nThis advisory has been marked as a false positive.", "references": [ { "reference_url": "http://netty.io/news/2016/06/07/4-0-37-Final.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://netty.io/news/2016/06/07/4-0-37-Final.html" }, { "reference_url": "http://netty.io/news/2016/06/07/4-1-1-Final.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://netty.io/news/2016/06/07/4-1-1-Final.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/53448?format=api", "purl": "pkg:maven/io.netty/netty-handler@4.0.37.Final", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/io.netty/netty-handler@4.0.37.Final" }, { "url": "http://public2.vulnerablecode.io/api/packages/53449?format=api", "purl": "pkg:maven/io.netty/netty-handler@4.1.1.Final", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/io.netty/netty-handler@4.1.1.Final" } ], "aliases": [ "CVE-2016-4970" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wtb2-m2jk-eqc2" } ], "fixing_vulnerabilities": [], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/io.netty/netty-handler@4.0-alpha0" }