Lookup for vulnerable packages by Package URL.

GET /api/packages/61802?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/61802?format=api",
    "purl": "pkg:pypi/django@0.96.0",
    "type": "pypi",
    "namespace": "",
    "name": "django",
    "version": "0.96.0",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": "0.96.1",
    "latest_non_vulnerable_version": "6.0.5",
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34654?format=api",
            "vulnerability_id": "VCID-4z7r-xd8z-3ybm",
            "summary": "The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.",
            "references": [
                {
                    "reference_url": "http://secunia.com/advisories/27435",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://secunia.com/advisories/27435"
                },
                {
                    "reference_url": "http://secunia.com/advisories/27597",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://secunia.com/advisories/27597"
                },
                {
                    "reference_url": "http://secunia.com/advisories/31961",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://secunia.com/advisories/31961"
                },
                {
                    "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38143",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38143"
                },
                {
                    "reference_url": "https://github.com/django/django",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/django/django"
                },
                {
                    "reference_url": "https://github.com/django/django/commit/412ed22502e11c50dbfee854627594f0e7e2c234",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/django/django/commit/412ed22502e11c50dbfee854627594f0e7e2c234"
                },
                {
                    "reference_url": "https://github.com/django/django/commit/7dd2dd08a79e388732ce00e2b5514f15bd6d0f6f",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/django/django/commit/7dd2dd08a79e388732ce00e2b5514f15bd6d0f6f"
                },
                {
                    "reference_url": "https://github.com/django/django/commit/8bc36e726c9e8c75c681d3ad232df8e882aaac81",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/django/django/commit/8bc36e726c9e8c75c681d3ad232df8e882aaac81"
                },
                {
                    "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2007-1.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2007-1.yaml"
                },
                {
                    "reference_url": "http://sourceforge.net/forum/forum.php?forum_id=749199",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://sourceforge.net/forum/forum.php?forum_id=749199"
                },
                {
                    "reference_url": "https://web.archive.org/web/20091201070224/http://secunia.com/advisories/27435",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://web.archive.org/web/20091201070224/http://secunia.com/advisories/27435"
                },
                {
                    "reference_url": "https://web.archive.org/web/20111224195100/http://secunia.com/advisories/27597",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://web.archive.org/web/20111224195100/http://secunia.com/advisories/27597"
                },
                {
                    "reference_url": "https://web.archive.org/web/20111229085535/http://secunia.com/advisories/31961",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://web.archive.org/web/20111229085535/http://secunia.com/advisories/31961"
                },
                {
                    "reference_url": "https://web.archive.org/web/20200228183657/http://www.securityfocus.com/bid/26227",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://web.archive.org/web/20200228183657/http://www.securityfocus.com/bid/26227"
                },
                {
                    "reference_url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html"
                },
                {
                    "reference_url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html"
                },
                {
                    "reference_url": "http://www.debian.org/security/2008/dsa-1640",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.debian.org/security/2008/dsa-1640"
                },
                {
                    "reference_url": "http://www.djangoproject.com/weblog/2007/oct/26/security-fix",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.djangoproject.com/weblog/2007/oct/26/security-fix"
                },
                {
                    "reference_url": "http://www.securityfocus.com/bid/26227",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.securityfocus.com/bid/26227"
                },
                {
                    "reference_url": "http://www.vupen.com/english/advisories/2007/3660",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.vupen.com/english/advisories/2007/3660"
                },
                {
                    "reference_url": "http://www.vupen.com/english/advisories/2007/3661",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.vupen.com/english/advisories/2007/3661"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5712",
                    "reference_id": "CVE-2007-5712",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5712"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-9v8h-57gv-qch6",
                    "reference_id": "GHSA-9v8h-57gv-qch6",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-9v8h-57gv-qch6"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/61803?format=api",
                    "purl": "pkg:pypi/django@0.96.1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@0.96.1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/6844?format=api",
                    "purl": "pkg:pypi/django@1.1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-18gm-v5zp-tqf9"
                        },
                        {
                            "vulnerability": "VCID-38e1-hepp-vkg9"
                        },
                        {
                            "vulnerability": "VCID-3kza-a88p-kfg7"
                        },
                        {
                            "vulnerability": "VCID-3sg7-t77d-rkc6"
                        },
                        {
                            "vulnerability": "VCID-5brz-383w-pfbb"
                        },
                        {
                            "vulnerability": "VCID-5vmb-d4xp-zfgy"
                        },
                        {
                            "vulnerability": "VCID-66ax-8wdn-1bgb"
                        },
                        {
                            "vulnerability": "VCID-6wah-r8vr-5qc4"
                        },
                        {
                            "vulnerability": "VCID-7cnm-hzsf-tybp"
                        },
                        {
                            "vulnerability": "VCID-7g7m-bfe1-wkhd"
                        },
                        {
                            "vulnerability": "VCID-7rz2-nqdn-hycc"
                        },
                        {
                            "vulnerability": "VCID-8gus-er59-1qak"
                        },
                        {
                            "vulnerability": "VCID-8v2c-7739-2ugp"
                        },
                        {
                            "vulnerability": "VCID-912q-3eks-4yfm"
                        },
                        {
                            "vulnerability": "VCID-9bsf-vm3b-ubhw"
                        },
                        {
                            "vulnerability": "VCID-9mpt-zxaw-kkeg"
                        },
                        {
                            "vulnerability": "VCID-bahz-gfxv-e3b2"
                        },
                        {
                            "vulnerability": "VCID-dh12-js4b-h7fw"
                        },
                        {
                            "vulnerability": "VCID-ffsr-th58-p3ct"
                        },
                        {
                            "vulnerability": "VCID-jfya-694v-myar"
                        },
                        {
                            "vulnerability": "VCID-ksh8-pazn-dbca"
                        },
                        {
                            "vulnerability": "VCID-kuyz-3pxs-r7cv"
                        },
                        {
                            "vulnerability": "VCID-mccp-khb9-qkb7"
                        },
                        {
                            "vulnerability": "VCID-n6ps-f6s6-zkbj"
                        },
                        {
                            "vulnerability": "VCID-r2a9-kym9-zqgq"
                        },
                        {
                            "vulnerability": "VCID-r7tk-79xy-jkhj"
                        },
                        {
                            "vulnerability": "VCID-rq19-9v21-47dy"
                        },
                        {
                            "vulnerability": "VCID-rxxr-sseq-k7a9"
                        },
                        {
                            "vulnerability": "VCID-ta66-7qrm-sbhu"
                        },
                        {
                            "vulnerability": "VCID-u4a7-uvcb-9kf8"
                        },
                        {
                            "vulnerability": "VCID-u5u9-xbb6-93hc"
                        },
                        {
                            "vulnerability": "VCID-u6sd-648r-qbdb"
                        },
                        {
                            "vulnerability": "VCID-vdpf-jddk-syda"
                        },
                        {
                            "vulnerability": "VCID-vj5u-2ukv-audq"
                        },
                        {
                            "vulnerability": "VCID-weqb-fxu4-17e7"
                        },
                        {
                            "vulnerability": "VCID-xf2n-qua7-m7fb"
                        },
                        {
                            "vulnerability": "VCID-zd9y-sxbn-kqa3"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.1"
                }
            ],
            "aliases": [
                "CVE-2007-5712",
                "GHSA-9v8h-57gv-qch6",
                "PYSEC-2007-1"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4z7r-xd8z-3ybm"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34667?format=api",
            "vulnerability_id": "VCID-sj21-65x3-buh5",
            "summary": "The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.",
            "references": [
                {
                    "reference_url": "http://osvdb.org/47906",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://osvdb.org/47906"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=460966",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=460966"
                },
                {
                    "reference_url": "http://secunia.com/advisories/31837",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://secunia.com/advisories/31837"
                },
                {
                    "reference_url": "http://secunia.com/advisories/31961",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://secunia.com/advisories/31961"
                },
                {
                    "reference_url": "https://github.com/django/django",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/django/django"
                },
                {
                    "reference_url": "https://github.com/django/django/commit/44debfeaa4473bd28872c735dd3d9afde6886752",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/django/django/commit/44debfeaa4473bd28872c735dd3d9afde6886752"
                },
                {
                    "reference_url": "https://github.com/django/django/commit/7e0972bded362bc4b851c109df2c8a6548481a8e",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/django/django/commit/7e0972bded362bc4b851c109df2c8a6548481a8e"
                },
                {
                    "reference_url": "https://github.com/django/django/commit/aee48854a164382c655acb9f18b3c06c3d238e81",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/django/django/commit/aee48854a164382c655acb9f18b3c06c3d238e81"
                },
                {
                    "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2008-2.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2008-2.yaml"
                },
                {
                    "reference_url": "https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00091.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00091.html"
                },
                {
                    "reference_url": "https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00131.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00131.html"
                },
                {
                    "reference_url": "http://www.debian.org/security/2008/dsa-1640",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.debian.org/security/2008/dsa-1640"
                },
                {
                    "reference_url": "http://www.djangoproject.com/weblog/2008/sep/02/security/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.djangoproject.com/weblog/2008/sep/02/security/"
                },
                {
                    "reference_url": "http://www.openwall.com/lists/oss-security/2008/09/03/4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.openwall.com/lists/oss-security/2008/09/03/4"
                },
                {
                    "reference_url": "http://www.vupen.com/english/advisories/2008/2533",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.vupen.com/english/advisories/2008/2533"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3909",
                    "reference_id": "CVE-2008-3909",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3909"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-r5cj-wv24-92p5",
                    "reference_id": "GHSA-r5cj-wv24-92p5",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-r5cj-wv24-92p5"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/61885?format=api",
                    "purl": "pkg:pypi/django@0.96.3",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@0.96.3"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/6844?format=api",
                    "purl": "pkg:pypi/django@1.1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-18gm-v5zp-tqf9"
                        },
                        {
                            "vulnerability": "VCID-38e1-hepp-vkg9"
                        },
                        {
                            "vulnerability": "VCID-3kza-a88p-kfg7"
                        },
                        {
                            "vulnerability": "VCID-3sg7-t77d-rkc6"
                        },
                        {
                            "vulnerability": "VCID-5brz-383w-pfbb"
                        },
                        {
                            "vulnerability": "VCID-5vmb-d4xp-zfgy"
                        },
                        {
                            "vulnerability": "VCID-66ax-8wdn-1bgb"
                        },
                        {
                            "vulnerability": "VCID-6wah-r8vr-5qc4"
                        },
                        {
                            "vulnerability": "VCID-7cnm-hzsf-tybp"
                        },
                        {
                            "vulnerability": "VCID-7g7m-bfe1-wkhd"
                        },
                        {
                            "vulnerability": "VCID-7rz2-nqdn-hycc"
                        },
                        {
                            "vulnerability": "VCID-8gus-er59-1qak"
                        },
                        {
                            "vulnerability": "VCID-8v2c-7739-2ugp"
                        },
                        {
                            "vulnerability": "VCID-912q-3eks-4yfm"
                        },
                        {
                            "vulnerability": "VCID-9bsf-vm3b-ubhw"
                        },
                        {
                            "vulnerability": "VCID-9mpt-zxaw-kkeg"
                        },
                        {
                            "vulnerability": "VCID-bahz-gfxv-e3b2"
                        },
                        {
                            "vulnerability": "VCID-dh12-js4b-h7fw"
                        },
                        {
                            "vulnerability": "VCID-ffsr-th58-p3ct"
                        },
                        {
                            "vulnerability": "VCID-jfya-694v-myar"
                        },
                        {
                            "vulnerability": "VCID-ksh8-pazn-dbca"
                        },
                        {
                            "vulnerability": "VCID-kuyz-3pxs-r7cv"
                        },
                        {
                            "vulnerability": "VCID-mccp-khb9-qkb7"
                        },
                        {
                            "vulnerability": "VCID-n6ps-f6s6-zkbj"
                        },
                        {
                            "vulnerability": "VCID-r2a9-kym9-zqgq"
                        },
                        {
                            "vulnerability": "VCID-r7tk-79xy-jkhj"
                        },
                        {
                            "vulnerability": "VCID-rq19-9v21-47dy"
                        },
                        {
                            "vulnerability": "VCID-rxxr-sseq-k7a9"
                        },
                        {
                            "vulnerability": "VCID-ta66-7qrm-sbhu"
                        },
                        {
                            "vulnerability": "VCID-u4a7-uvcb-9kf8"
                        },
                        {
                            "vulnerability": "VCID-u5u9-xbb6-93hc"
                        },
                        {
                            "vulnerability": "VCID-u6sd-648r-qbdb"
                        },
                        {
                            "vulnerability": "VCID-vdpf-jddk-syda"
                        },
                        {
                            "vulnerability": "VCID-vj5u-2ukv-audq"
                        },
                        {
                            "vulnerability": "VCID-weqb-fxu4-17e7"
                        },
                        {
                            "vulnerability": "VCID-xf2n-qua7-m7fb"
                        },
                        {
                            "vulnerability": "VCID-zd9y-sxbn-kqa3"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.1"
                }
            ],
            "aliases": [
                "CVE-2008-3909",
                "GHSA-r5cj-wv24-92p5",
                "PYSEC-2008-2"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sj21-65x3-buh5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34679?format=api",
            "vulnerability_id": "VCID-u4sa-1yn4-h3ff",
            "summary": "The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected \"static media files,\" which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.",
            "references": [
                {
                    "reference_url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539134",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539134"
                },
                {
                    "reference_url": "http://code.djangoproject.com/changeset/11353",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://code.djangoproject.com/changeset/11353"
                },
                {
                    "reference_url": "http://secunia.com/advisories/36137",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://secunia.com/advisories/36137"
                },
                {
                    "reference_url": "http://secunia.com/advisories/36153",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://secunia.com/advisories/36153"
                },
                {
                    "reference_url": "https://github.com/django/django",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/django/django"
                },
                {
                    "reference_url": "https://github.com/django/django/commit/da85d76fd6ca846f3b0ff414e042ddb5e62e2e69",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/django/django/commit/da85d76fd6ca846f3b0ff414e042ddb5e62e2e69"
                },
                {
                    "reference_url": "https://github.com/django/django/commit/df7f917b7f51ba969faa49d000ffc79572c5dcb4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/django/django/commit/df7f917b7f51ba969faa49d000ffc79572c5dcb4"
                },
                {
                    "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2009-3.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2009-3.yaml"
                },
                {
                    "reference_url": "https://web.archive.org/web/20111211001428/http://www.securityfocus.com/bid/35859",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://web.archive.org/web/20111211001428/http://www.securityfocus.com/bid/35859"
                },
                {
                    "reference_url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00055.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00055.html"
                },
                {
                    "reference_url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00069.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00069.html"
                },
                {
                    "reference_url": "http://www.djangoproject.com/weblog/2009/jul/28/security/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.djangoproject.com/weblog/2009/jul/28/security/"
                },
                {
                    "reference_url": "http://www.openwall.com/lists/oss-security/2009/07/29/2",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.openwall.com/lists/oss-security/2009/07/29/2"
                },
                {
                    "reference_url": "http://www.securityfocus.com/bid/35859",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.securityfocus.com/bid/35859"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2659",
                    "reference_id": "CVE-2009-2659",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2659"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-9xg7-gg9m-rmq9",
                    "reference_id": "GHSA-9xg7-gg9m-rmq9",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-9xg7-gg9m-rmq9"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/61924?format=api",
                    "purl": "pkg:pypi/django@0.96.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@0.96.4"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/6842?format=api",
                    "purl": "pkg:pypi/django@1.0.3",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-18gm-v5zp-tqf9"
                        },
                        {
                            "vulnerability": "VCID-38e1-hepp-vkg9"
                        },
                        {
                            "vulnerability": "VCID-3kza-a88p-kfg7"
                        },
                        {
                            "vulnerability": "VCID-3sg7-t77d-rkc6"
                        },
                        {
                            "vulnerability": "VCID-4z7r-xd8z-3ybm"
                        },
                        {
                            "vulnerability": "VCID-5brz-383w-pfbb"
                        },
                        {
                            "vulnerability": "VCID-5vmb-d4xp-zfgy"
                        },
                        {
                            "vulnerability": "VCID-66ax-8wdn-1bgb"
                        },
                        {
                            "vulnerability": "VCID-6wah-r8vr-5qc4"
                        },
                        {
                            "vulnerability": "VCID-7cnm-hzsf-tybp"
                        },
                        {
                            "vulnerability": "VCID-7g7m-bfe1-wkhd"
                        },
                        {
                            "vulnerability": "VCID-7rz2-nqdn-hycc"
                        },
                        {
                            "vulnerability": "VCID-8gus-er59-1qak"
                        },
                        {
                            "vulnerability": "VCID-8v2c-7739-2ugp"
                        },
                        {
                            "vulnerability": "VCID-912q-3eks-4yfm"
                        },
                        {
                            "vulnerability": "VCID-9bsf-vm3b-ubhw"
                        },
                        {
                            "vulnerability": "VCID-9mpt-zxaw-kkeg"
                        },
                        {
                            "vulnerability": "VCID-bahz-gfxv-e3b2"
                        },
                        {
                            "vulnerability": "VCID-dh12-js4b-h7fw"
                        },
                        {
                            "vulnerability": "VCID-ffsr-th58-p3ct"
                        },
                        {
                            "vulnerability": "VCID-jfya-694v-myar"
                        },
                        {
                            "vulnerability": "VCID-ksh8-pazn-dbca"
                        },
                        {
                            "vulnerability": "VCID-mccp-khb9-qkb7"
                        },
                        {
                            "vulnerability": "VCID-r2a9-kym9-zqgq"
                        },
                        {
                            "vulnerability": "VCID-r7tk-79xy-jkhj"
                        },
                        {
                            "vulnerability": "VCID-rq19-9v21-47dy"
                        },
                        {
                            "vulnerability": "VCID-rxxr-sseq-k7a9"
                        },
                        {
                            "vulnerability": "VCID-sj21-65x3-buh5"
                        },
                        {
                            "vulnerability": "VCID-ta66-7qrm-sbhu"
                        },
                        {
                            "vulnerability": "VCID-u4a7-uvcb-9kf8"
                        },
                        {
                            "vulnerability": "VCID-u4sa-1yn4-h3ff"
                        },
                        {
                            "vulnerability": "VCID-u5u9-xbb6-93hc"
                        },
                        {
                            "vulnerability": "VCID-u6sd-648r-qbdb"
                        },
                        {
                            "vulnerability": "VCID-ukf6-xwqc-xkdc"
                        },
                        {
                            "vulnerability": "VCID-vdpf-jddk-syda"
                        },
                        {
                            "vulnerability": "VCID-vj5u-2ukv-audq"
                        },
                        {
                            "vulnerability": "VCID-weqb-fxu4-17e7"
                        },
                        {
                            "vulnerability": "VCID-xf2n-qua7-m7fb"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.0.3"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/6844?format=api",
                    "purl": "pkg:pypi/django@1.1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-18gm-v5zp-tqf9"
                        },
                        {
                            "vulnerability": "VCID-38e1-hepp-vkg9"
                        },
                        {
                            "vulnerability": "VCID-3kza-a88p-kfg7"
                        },
                        {
                            "vulnerability": "VCID-3sg7-t77d-rkc6"
                        },
                        {
                            "vulnerability": "VCID-5brz-383w-pfbb"
                        },
                        {
                            "vulnerability": "VCID-5vmb-d4xp-zfgy"
                        },
                        {
                            "vulnerability": "VCID-66ax-8wdn-1bgb"
                        },
                        {
                            "vulnerability": "VCID-6wah-r8vr-5qc4"
                        },
                        {
                            "vulnerability": "VCID-7cnm-hzsf-tybp"
                        },
                        {
                            "vulnerability": "VCID-7g7m-bfe1-wkhd"
                        },
                        {
                            "vulnerability": "VCID-7rz2-nqdn-hycc"
                        },
                        {
                            "vulnerability": "VCID-8gus-er59-1qak"
                        },
                        {
                            "vulnerability": "VCID-8v2c-7739-2ugp"
                        },
                        {
                            "vulnerability": "VCID-912q-3eks-4yfm"
                        },
                        {
                            "vulnerability": "VCID-9bsf-vm3b-ubhw"
                        },
                        {
                            "vulnerability": "VCID-9mpt-zxaw-kkeg"
                        },
                        {
                            "vulnerability": "VCID-bahz-gfxv-e3b2"
                        },
                        {
                            "vulnerability": "VCID-dh12-js4b-h7fw"
                        },
                        {
                            "vulnerability": "VCID-ffsr-th58-p3ct"
                        },
                        {
                            "vulnerability": "VCID-jfya-694v-myar"
                        },
                        {
                            "vulnerability": "VCID-ksh8-pazn-dbca"
                        },
                        {
                            "vulnerability": "VCID-kuyz-3pxs-r7cv"
                        },
                        {
                            "vulnerability": "VCID-mccp-khb9-qkb7"
                        },
                        {
                            "vulnerability": "VCID-n6ps-f6s6-zkbj"
                        },
                        {
                            "vulnerability": "VCID-r2a9-kym9-zqgq"
                        },
                        {
                            "vulnerability": "VCID-r7tk-79xy-jkhj"
                        },
                        {
                            "vulnerability": "VCID-rq19-9v21-47dy"
                        },
                        {
                            "vulnerability": "VCID-rxxr-sseq-k7a9"
                        },
                        {
                            "vulnerability": "VCID-ta66-7qrm-sbhu"
                        },
                        {
                            "vulnerability": "VCID-u4a7-uvcb-9kf8"
                        },
                        {
                            "vulnerability": "VCID-u5u9-xbb6-93hc"
                        },
                        {
                            "vulnerability": "VCID-u6sd-648r-qbdb"
                        },
                        {
                            "vulnerability": "VCID-vdpf-jddk-syda"
                        },
                        {
                            "vulnerability": "VCID-vj5u-2ukv-audq"
                        },
                        {
                            "vulnerability": "VCID-weqb-fxu4-17e7"
                        },
                        {
                            "vulnerability": "VCID-xf2n-qua7-m7fb"
                        },
                        {
                            "vulnerability": "VCID-zd9y-sxbn-kqa3"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.1"
                }
            ],
            "aliases": [
                "CVE-2009-2659",
                "GHSA-9xg7-gg9m-rmq9",
                "PYSEC-2009-3"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u4sa-1yn4-h3ff"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@0.96.0"
}