Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/81146?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/81146?format=api", "purl": "pkg:npm/uptime-kuma@1.22.1", "type": "npm", "namespace": "", "name": "uptime-kuma", "version": "1.22.1", "qualifiers": {}, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "1.23.3", "latest_non_vulnerable_version": "2.2.0", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54710?format=api", "vulnerability_id": "VCID-9j3t-g9gt-ffdg", "summary": "Uptime Kuma's authenticated path traversal via plugin repository name may lead to unavailability or data loss\nA path traversal vulnerability via the plugin repository name allows an authenticated attacker to delete files on the server leading to unavailability and potentially data loss.", "references": [ { "reference_url": "https://github.com/louislam/uptime-kuma", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/louislam/uptime-kuma" }, { "reference_url": "https://github.com/louislam/uptime-kuma/blob/de74efb2e6601dcbcfed32cddefc4078a80fcb0b/server/plugins-manager.js#L75-L80", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/louislam/uptime-kuma/blob/de74efb2e6601dcbcfed32cddefc4078a80fcb0b/server/plugins-manager.js#L75-L80" }, { "reference_url": "https://github.com/louislam/uptime-kuma/commit/a0736e04b2838aae198c2110db244eab6f87757b", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/louislam/uptime-kuma/commit/a0736e04b2838aae198c2110db244eab6f87757b" }, { "reference_url": "https://github.com/louislam/uptime-kuma/pull/3346", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/louislam/uptime-kuma/pull/3346" }, { "reference_url": "https://github.com/louislam/uptime-kuma/releases/tag/1.22.1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/louislam/uptime-kuma/releases/tag/1.22.1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36822", "reference_id": "CVE-2023-36822", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36822" }, { "reference_url": "https://github.com/advisories/GHSA-vr8x-74pm-6vj7", "reference_id": "GHSA-vr8x-74pm-6vj7", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-vr8x-74pm-6vj7" }, { "reference_url": "https://github.com/louislam/uptime-kuma/security/advisories/GHSA-vr8x-74pm-6vj7", "reference_id": "GHSA-vr8x-74pm-6vj7", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/louislam/uptime-kuma/security/advisories/GHSA-vr8x-74pm-6vj7" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/81146?format=api", "purl": "pkg:npm/uptime-kuma@1.22.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/uptime-kuma@1.22.1" } ], "aliases": [ "CVE-2023-36822", "GHSA-vr8x-74pm-6vj7" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9j3t-g9gt-ffdg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54712?format=api", "vulnerability_id": "VCID-djqm-dymk-43a5", "summary": "Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation\nInstallation of a maliciously crafted plugin allows for remote code execution by an authenticated attacker.", "references": [ { "reference_url": "https://github.com/louislam/uptime-kuma", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/louislam/uptime-kuma" }, { "reference_url": "https://github.com/louislam/uptime-kuma/blob/8c60e902e1c76ecbbd1b0423b07ce615341cb850/server/plugins-manager.js#L210-L216", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/louislam/uptime-kuma/blob/8c60e902e1c76ecbbd1b0423b07ce615341cb850/server/plugins-manager.js#L210-L216" }, { "reference_url": "https://github.com/louislam/uptime-kuma/commit/a0736e04b2838aae198c2110db244eab6f87757b", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/louislam/uptime-kuma/commit/a0736e04b2838aae198c2110db244eab6f87757b" }, { "reference_url": "https://github.com/louislam/uptime-kuma/pull/3346", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/louislam/uptime-kuma/pull/3346" }, { "reference_url": "https://github.com/louislam/uptime-kuma/releases/tag/1.22.1", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/louislam/uptime-kuma/releases/tag/1.22.1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36821", "reference_id": "CVE-2023-36821", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36821" }, { "reference_url": "https://github.com/advisories/GHSA-7grx-f945-mj96", "reference_id": "GHSA-7grx-f945-mj96", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-7grx-f945-mj96" }, { "reference_url": "https://github.com/louislam/uptime-kuma/security/advisories/GHSA-7grx-f945-mj96", "reference_id": "GHSA-7grx-f945-mj96", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/louislam/uptime-kuma/security/advisories/GHSA-7grx-f945-mj96" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/81146?format=api", "purl": "pkg:npm/uptime-kuma@1.22.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/uptime-kuma@1.22.1" } ], "aliases": [ "CVE-2023-36821", "GHSA-7grx-f945-mj96" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-djqm-dymk-43a5" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/uptime-kuma@1.22.1" }