Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/582283?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/582283?format=api", "purl": "pkg:deb/debian/blender@2.83.5%2Bdfsg-5%2Bdeb11u1", "type": "deb", "namespace": "debian", "name": "blender", "version": "2.83.5+dfsg-5+deb11u1", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "3.4.1+dfsg-2", "latest_non_vulnerable_version": "3.4.1+dfsg-2", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/95131?format=api", "vulnerability_id": "VCID-8kuz-j9zs-zkeq", "summary": "Endless Infinite loop in Blender-thumnailing due to logical bugs.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-2833", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.64385", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.64414", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.64375", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.64423", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.64438", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.64451", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.64439", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.6441", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.64446", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.64457", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.6445", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.6447", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.64483", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00467", "scoring_system": "epss", "scoring_elements": "0.64481", "published_at": "2026-04-29T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-2833" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2833", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2833" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582284?format=api", "purl": "pkg:deb/debian/blender@3.4.1%2Bdfsg-2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/blender@3.4.1%252Bdfsg-2" } ], "aliases": [ "CVE-2022-2833" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8kuz-j9zs-zkeq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/95130?format=api", "vulnerability_id": "VCID-fzje-vctu-vqcv", "summary": "A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-2831", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73614", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73638", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73611", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73646", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73659", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73682", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73664", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73656", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73699", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73709", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73732", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73741", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00779", "scoring_system": "epss", "scoring_elements": "0.73742", "published_at": "2026-04-29T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-2831" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2831", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2831" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582284?format=api", "purl": "pkg:deb/debian/blender@3.4.1%2Bdfsg-2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/blender@3.4.1%252Bdfsg-2" } ], "aliases": [ "CVE-2022-2831" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fzje-vctu-vqcv" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37518?format=api", "vulnerability_id": "VCID-3feg-t1sc-puhk", "summary": "Multiple vulnerabilities have been discovered in Blender, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-0546", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00481", "scoring_system": "epss", "scoring_elements": "0.6516", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00481", "scoring_system": "epss", "scoring_elements": "0.65159", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00503", "scoring_system": "epss", "scoring_elements": "0.66112", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00503", "scoring_system": "epss", "scoring_elements": "0.66082", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00503", "scoring_system": "epss", "scoring_elements": "0.66118", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00503", "scoring_system": "epss", "scoring_elements": "0.66131", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66178", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66197", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66079", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66148", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66116", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66165", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66121", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00522", "scoring_system": "epss", "scoring_elements": "0.66938", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00522", "scoring_system": "epss", "scoring_elements": "0.66915", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-0546" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0544", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0544" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0545", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0545" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0546", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0546" }, { "reference_url": "https://security.archlinux.org/AVG-2799", "reference_id": "AVG-2799", "reference_type": "", "scores": [ { "value": "Unknown", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2799" }, { "reference_url": "https://security.gentoo.org/glsa/202403-02", "reference_id": "GLSA-202403-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202403-02" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1037861?format=api", "purl": "pkg:deb/debian/blender@2.79.b%2Bdfsg0-7%2Bdeb10u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3feg-t1sc-puhk" }, { "vulnerability": "VCID-anrz-grzm-bued" }, { "vulnerability": "VCID-qsqj-j8s1-6qfq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/blender@2.79.b%252Bdfsg0-7%252Bdeb10u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/582283?format=api", "purl": "pkg:deb/debian/blender@2.83.5%2Bdfsg-5%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8kuz-j9zs-zkeq" }, { "vulnerability": "VCID-fzje-vctu-vqcv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/blender@2.83.5%252Bdfsg-5%252Bdeb11u1" } ], "aliases": [ "CVE-2022-0546" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3feg-t1sc-puhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37515?format=api", "vulnerability_id": "VCID-anrz-grzm-bued", "summary": "Multiple vulnerabilities have been discovered in Blender, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-0545", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00375", "scoring_system": "epss", "scoring_elements": "0.59152", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00375", "scoring_system": "epss", "scoring_elements": "0.5913", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00375", "scoring_system": "epss", "scoring_elements": "0.59111", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00375", "scoring_system": "epss", "scoring_elements": "0.59147", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00376", "scoring_system": "epss", "scoring_elements": "0.59175", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00376", "scoring_system": "epss", "scoring_elements": "0.59188", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00376", "scoring_system": "epss", "scoring_elements": "0.59208", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00376", "scoring_system": "epss", "scoring_elements": "0.59063", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00376", "scoring_system": "epss", "scoring_elements": "0.59136", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00376", "scoring_system": "epss", "scoring_elements": "0.5916", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00376", "scoring_system": "epss", "scoring_elements": "0.59124", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00408", "scoring_system": "epss", "scoring_elements": "0.6124", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00408", "scoring_system": "epss", "scoring_elements": "0.61233", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00418", "scoring_system": "epss", "scoring_elements": "0.61888", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00418", "scoring_system": "epss", "scoring_elements": "0.61883", "published_at": "2026-04-24T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-0545" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0544", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0544" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0545", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0545" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0546", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0546" }, { "reference_url": "https://security.archlinux.org/AVG-2799", "reference_id": "AVG-2799", "reference_type": "", "scores": [ { "value": "Unknown", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2799" }, { "reference_url": "https://security.gentoo.org/glsa/202403-02", "reference_id": "GLSA-202403-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202403-02" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1037861?format=api", "purl": "pkg:deb/debian/blender@2.79.b%2Bdfsg0-7%2Bdeb10u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3feg-t1sc-puhk" }, { "vulnerability": "VCID-anrz-grzm-bued" }, { "vulnerability": "VCID-qsqj-j8s1-6qfq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/blender@2.79.b%252Bdfsg0-7%252Bdeb10u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/582283?format=api", "purl": "pkg:deb/debian/blender@2.83.5%2Bdfsg-5%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8kuz-j9zs-zkeq" }, { "vulnerability": "VCID-fzje-vctu-vqcv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/blender@2.83.5%252Bdfsg-5%252Bdeb11u1" } ], "aliases": [ "CVE-2022-0545" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-anrz-grzm-bued" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37511?format=api", "vulnerability_id": "VCID-qsqj-j8s1-6qfq", "summary": "Multiple vulnerabilities have been discovered in Blender, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-0544", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.33811", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34026", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34072", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.33699", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34149", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34181", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34041", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34084", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34115", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34113", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34014", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.33991", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00152", "scoring_system": "epss", "scoring_elements": "0.35494", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00152", "scoring_system": "epss", "scoring_elements": "0.35581", "published_at": "2026-04-26T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-0544" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0544", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0544" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0545", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0545" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0546", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0546" }, { "reference_url": "https://security.archlinux.org/AVG-2799", "reference_id": "AVG-2799", "reference_type": "", "scores": [ { "value": "Unknown", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2799" }, { "reference_url": "https://security.gentoo.org/glsa/202403-02", "reference_id": "GLSA-202403-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202403-02" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1037861?format=api", "purl": "pkg:deb/debian/blender@2.79.b%2Bdfsg0-7%2Bdeb10u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3feg-t1sc-puhk" }, { "vulnerability": "VCID-anrz-grzm-bued" }, { "vulnerability": "VCID-qsqj-j8s1-6qfq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/blender@2.79.b%252Bdfsg0-7%252Bdeb10u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/582283?format=api", "purl": "pkg:deb/debian/blender@2.83.5%2Bdfsg-5%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8kuz-j9zs-zkeq" }, { "vulnerability": "VCID-fzje-vctu-vqcv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/blender@2.83.5%252Bdfsg-5%252Bdeb11u1" } ], "aliases": [ "CVE-2022-0544" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qsqj-j8s1-6qfq" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/blender@2.83.5%252Bdfsg-5%252Bdeb11u1" }