Package Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/66478?format=api",
    "purl": "pkg:gem/commonmarker@0.23.10",
    "type": "gem",
    "namespace": "",
    "name": "commonmarker",
    "version": "0.23.10",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "1.0.0.pre",
    "latest_non_vulnerable_version": "1.0.0.pre",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/45800?format=api",
            "vulnerability_id": "VCID-9q5d-95ws-2uhh",
            "summary": "Several quadratic complexity bugs may lead to denial of service in Commonmarker\n## Impact\n\nSeveral quadratic complexity bugs in commonmarker's underlying [`cmark-gfm`](https://github.com/github/cmark-gfm) library may lead to unbounded resource exhaustion and subsequent denial of service.\n\nThe following vulnerabilities were addressed:\n\n* [CVE-2023-37463](https://github.com/github/cmark-gfm/security/advisories/GHSA-w4qg-3vf7-m9x5)\n\nFor more information, consult the release notes for version [`0.29.0.gfm.12`](https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.12).\n\n## Mitigation\n\nUsers are advised to upgrade to commonmarker version [`0.23.10`](https://rubygems.org/gems/commonmarker/versions/0.23.10).",
            "references": [
                {
                    "reference_url": "https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.12",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.12"
                },
                {
                    "reference_url": "https://github.com/gjtorikian/commonmarker",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/gjtorikian/commonmarker"
                },
                {
                    "reference_url": "https://github.com/gjtorikian/commonmarker/commit/db8cd377b54541f7fd484d168b7682a282a680f7",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/gjtorikian/commonmarker/commit/db8cd377b54541f7fd484d168b7682a282a680f7"
                },
                {
                    "reference_url": "https://rubygems.org/gems/commonmarker/versions/0.23.10",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://rubygems.org/gems/commonmarker/versions/0.23.10"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-7vh7-fw88-wj87",
                    "reference_id": "GHSA-7vh7-fw88-wj87",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-7vh7-fw88-wj87"
                },
                {
                    "reference_url": "https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-7vh7-fw88-wj87",
                    "reference_id": "GHSA-7vh7-fw88-wj87",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-7vh7-fw88-wj87"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/66478?format=api",
                    "purl": "pkg:gem/commonmarker@0.23.10",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:gem/commonmarker@0.23.10"
                }
            ],
            "aliases": [
                "GHSA-7vh7-fw88-wj87",
                "GMS-2023-1914"
            ],
            "risk_score": 3.1,
            "exploitability": "0.5",
            "weighted_severity": "6.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9q5d-95ws-2uhh"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:gem/commonmarker@0.23.10"
}