Package Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/63530?format=api",
    "purl": "pkg:composer/phpmyadmin/phpmyadmin@4.0.10%2B13",
    "type": "composer",
    "namespace": "phpmyadmin",
    "name": "phpmyadmin",
    "version": "4.0.10+13",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "4.0.10+16",
    "latest_non_vulnerable_version": "5.2.1",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44163?format=api",
            "vulnerability_id": "VCID-r9sb-489v-fqc9",
            "summary": "phpMyAdmin Cryptographic Vulnerability\nThe suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes it easier for remote attackers to guess passwords via a brute-force approach.",
            "references": [
                {
                    "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html"
                },
                {
                    "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html"
                },
                {
                    "reference_url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html"
                },
                {
                    "reference_url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html"
                },
                {
                    "reference_url": "https://github.com/phpmyadmin/phpmyadmin/commit/8dedcc1a175eb07debd4fe116407c43694c60b22",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/phpmyadmin/phpmyadmin/commit/8dedcc1a175eb07debd4fe116407c43694c60b22"
                },
                {
                    "reference_url": "https://github.com/phpmyadmin/phpmyadmin/commit/912856b432d794201884c36e5f390d446339b6e4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/phpmyadmin/phpmyadmin/commit/912856b432d794201884c36e5f390d446339b6e4"
                },
                {
                    "reference_url": "http://www.debian.org/security/2016/dsa-3627",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.debian.org/security/2016/dsa-3627"
                },
                {
                    "reference_url": "http://www.phpmyadmin.net/home_page/security/PMASA-2016-4.php",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2016-4.php"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1927",
                    "reference_id": "CVE-2016-1927",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1927"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-4gmg-gwjh-3mmr",
                    "reference_id": "GHSA-4gmg-gwjh-3mmr",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-4gmg-gwjh-3mmr"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/63530?format=api",
                    "purl": "pkg:composer/phpmyadmin/phpmyadmin@4.0.10%2B13",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmyadmin/phpmyadmin@4.0.10%252B13"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/52543?format=api",
                    "purl": "pkg:composer/phpmyadmin/phpmyadmin@4.4.15%2B3",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1hvw-4h4d-zkhv"
                        },
                        {
                            "vulnerability": "VCID-4kax-4bpz-g7c5"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmyadmin/phpmyadmin@4.4.15%252B3"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/52575?format=api",
                    "purl": "pkg:composer/phpmyadmin/phpmyadmin@4.5.4",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-b6ng-ygap-zqh4"
                        },
                        {
                            "vulnerability": "VCID-pfdk-db4h-47dx"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmyadmin/phpmyadmin@4.5.4"
                }
            ],
            "aliases": [
                "CVE-2016-1927",
                "GHSA-4gmg-gwjh-3mmr"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-r9sb-489v-fqc9"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmyadmin/phpmyadmin@4.0.10%252B13"
}