Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/80278?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/80278?format=api", "purl": "pkg:cargo/h2@0.4.0", "type": "cargo", "namespace": "", "name": "h2", "version": "0.4.0", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "0.4.2", "latest_non_vulnerable_version": "0.4.4", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/340647?format=api", "vulnerability_id": "VCID-uxja-62es-e7dk", "summary": "Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)", "references": [ { "reference_url": "https://github.com/hyperium/h2", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/hyperium/h2" }, { "reference_url": "https://github.com/hyperium/h2/commit/59570e11ccddbec85f67a0c7aa353f7730c68854", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/hyperium/h2/commit/59570e11ccddbec85f67a0c7aa353f7730c68854" }, { "reference_url": "https://github.com/hyperium/h2/commit/d919cd6fd8e0f4f5d1f6282fab0b38a1b4bf999c", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/hyperium/h2/commit/d919cd6fd8e0f4f5d1f6282fab0b38a1b4bf999c" }, { "reference_url": "https://github.com/hyperium/h2/pull/737", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/hyperium/h2/pull/737" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2024-0003.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2024-0003.html" }, { "reference_url": "https://github.com/advisories/GHSA-8r5v-vm4m-4g25", "reference_id": "GHSA-8r5v-vm4m-4g25", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8r5v-vm4m-4g25" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80279?format=api", "purl": "pkg:cargo/h2@0.4.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:cargo/h2@0.4.2" } ], "aliases": [ "GHSA-8r5v-vm4m-4g25" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uxja-62es-e7dk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/340671?format=api", "vulnerability_id": "VCID-wuxh-n9ef-dua7", "summary": "h2 servers vulnerable to degradation of service with CONTINUATION Flood", "references": [ { "reference_url": "https://github.com/hyperium/h2", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/hyperium/h2" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2024-0332.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2024-0332.html" }, { "reference_url": "https://seanmonstar.com/blog/hyper-http2-continuation-flood", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://seanmonstar.com/blog/hyper-http2-continuation-flood" }, { "reference_url": "https://www.kb.cert.org/vuls/id/421644", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.kb.cert.org/vuls/id/421644" }, { "reference_url": "https://github.com/advisories/GHSA-q6cp-qfwq-4gcv", "reference_id": "GHSA-q6cp-qfwq-4gcv", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-q6cp-qfwq-4gcv" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80601?format=api", "purl": "pkg:cargo/h2@0.4.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:cargo/h2@0.4.4" } ], "aliases": [ "GHSA-q6cp-qfwq-4gcv" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wuxh-n9ef-dua7" } ], "fixing_vulnerabilities": [], "risk_score": "3.1", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:cargo/h2@0.4.0" }