Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/60146?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/60146?format=api", "purl": "pkg:composer/oro/platform@4.1.17", "type": "composer", "namespace": "oro", "name": "platform", "version": "4.1.17", "qualifiers": {}, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "4.2.7", "latest_non_vulnerable_version": "5.1.4", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42050?format=api", "vulnerability_id": "VCID-j1uw-vqqx-uuh2", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in oro/platform.", "references": [ { "reference_url": "https://github.com/advisories/GHSA-rrgw-3hg3-9x8c", "reference_id": "GHSA-rrgw-3hg3-9x8c", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-rrgw-3hg3-9x8c" }, { "reference_url": "https://github.com/oroinc/platform-er/security/advisories/GHSA-rrgw-3hg3-9x8c", "reference_id": "GHSA-rrgw-3hg3-9x8c", "reference_type": "", "scores": [], "url": "https://github.com/oroinc/platform-er/security/advisories/GHSA-rrgw-3hg3-9x8c" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/60145?format=api", "purl": "pkg:composer/oro/platform@3.1.29", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@3.1.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/60146?format=api", "purl": "pkg:composer/oro/platform@4.1.17", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@4.1.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/59958?format=api", "purl": "pkg:composer/oro/platform@4.2.8", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@4.2.8" } ], "aliases": [ "GHSA-rrgw-3hg3-9x8c", "GMS-2022-24" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j1uw-vqqx-uuh2" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@4.1.17" }