Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/53986?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/53986?format=api", "purl": "pkg:npm/pg@6.3.3", "type": "npm", "namespace": "", "name": "pg", "version": "6.3.3", "qualifiers": {}, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "6.4.2", "latest_non_vulnerable_version": "7.1.2", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38764?format=api", "vulnerability_id": "VCID-mu5a-vc5u-z7dv", "summary": "Remote Code Execution\nA remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name.", "references": [ { "reference_url": "https://node-postgres.com/announcements#2017-08-12-code-execution-vulnerability", "reference_id": "", "reference_type": "", "scores": [], "url": "https://node-postgres.com/announcements#2017-08-12-code-execution-vulnerability" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/53979?format=api", "purl": "pkg:npm/pg@2.11.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/pg@2.11.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/53980?format=api", "purl": "pkg:npm/pg@3.6.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/pg@3.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/53981?format=api", "purl": "pkg:npm/pg@4.5.7", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/pg@4.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/53982?format=api", "purl": "pkg:npm/pg@5.2.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/pg@5.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/53983?format=api", "purl": "pkg:npm/pg@6.0.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/pg@6.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/53984?format=api", "purl": "pkg:npm/pg@6.1.6", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/pg@6.1.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/53985?format=api", "purl": "pkg:npm/pg@6.2.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/pg@6.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/53986?format=api", "purl": "pkg:npm/pg@6.3.3", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/pg@6.3.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/53987?format=api", "purl": "pkg:npm/pg@6.4.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/pg@6.4.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/53988?format=api", "purl": "pkg:npm/pg@7.0.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/pg@7.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/53989?format=api", "purl": "pkg:npm/pg@7.1.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/pg@7.1.2" } ], "aliases": [ "GMS-2017-178" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mu5a-vc5u-z7dv" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/pg@6.3.3" }