Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/53519?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/53519?format=api", "purl": "pkg:pypi/mysql-connector-python@5.1.41", "type": "pypi", "namespace": "", "name": "mysql-connector-python", "version": "5.1.41", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "8.0.5", "latest_non_vulnerable_version": "8.0.33", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38567?format=api", "vulnerability_id": "VCID-eu3y-cg8j-s3g5", "summary": "Privilege\nAn easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors.", "references": [ { "reference_url": "http://www.debian.org/security/2017/dsa-3857", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.debian.org/security/2017/dsa-3857" }, { "reference_url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html" }, { "reference_url": "http://www.securityfocus.com/bid/97784", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/97784" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3586", "reference_id": "CVE-2017-3586", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3586" }, { "reference_url": "https://github.com/advisories/GHSA-pwh7-92h3-mqr6", "reference_id": "GHSA-pwh7-92h3-mqr6", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-pwh7-92h3-mqr6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/53518?format=api", "purl": "pkg:pypi/mysql-connector-python@8.0.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.5" } ], "aliases": [ "CVE-2017-3586", "GHSA-pwh7-92h3-mqr6" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eu3y-cg8j-s3g5" } ], "fixing_vulnerabilities": [], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@5.1.41" }