Lookup for vulnerable packages by Package URL.

Purlpkg:npm/ws@5.2.4
Typenpm
Namespace
Namews
Version5.2.4
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.0.1
Latest_non_vulnerable_version8.20.1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-h5b4-kz93-r7g3
vulnerability_id VCID-h5b4-kz93-r7g3
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-37890
reference_id
reference_type
scores
0
value 0.00541
scoring_system epss
scoring_elements 0.67935
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-37890
1
reference_url https://github.com/websockets/ws/commit/22c28763234aa75a7e1b76f5c01c181260d7917f
reference_id
reference_type
scores
url https://github.com/websockets/ws/commit/22c28763234aa75a7e1b76f5c01c181260d7917f
2
reference_url https://github.com/websockets/ws/commit/4abd8f6de4b0b65ef80b3ff081989479ed93377e
reference_id
reference_type
scores
url https://github.com/websockets/ws/commit/4abd8f6de4b0b65ef80b3ff081989479ed93377e
3
reference_url https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c
reference_id
reference_type
scores
url https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c
4
reference_url https://github.com/websockets/ws/commit/eeb76d313e2a00dd5247ca3597bba7877d064a63
reference_id
reference_type
scores
url https://github.com/websockets/ws/commit/eeb76d313e2a00dd5247ca3597bba7877d064a63
5
reference_url https://github.com/websockets/ws/issues/2230
reference_id
reference_type
scores
url https://github.com/websockets/ws/issues/2230
6
reference_url https://github.com/websockets/ws/pull/2231
reference_id
reference_type
scores
url https://github.com/websockets/ws/pull/2231
7
reference_url https://github.com/advisories/GHSA-3h5v-q93c-6h6q
reference_id GHSA-3h5v-q93c-6h6q
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3h5v-q93c-6h6q
8
reference_url https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q
reference_id GHSA-3h5v-q93c-6h6q
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q
fixed_packages
0
url pkg:npm/ws@5.2.4
purl pkg:npm/ws@5.2.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ws@5.2.4
1
url pkg:npm/ws@6.2.3
purl pkg:npm/ws@6.2.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ws@6.2.3
2
url pkg:npm/ws@7.5.10
purl pkg:npm/ws@7.5.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ws@7.5.10
3
url pkg:npm/ws@8.17.1
purl pkg:npm/ws@8.17.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ws@8.17.1
aliases CVE-2024-37890, GHSA-3h5v-q93c-6h6q
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h5b4-kz93-r7g3
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/ws@5.2.4