Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/923850?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/923850?format=api", "purl": "pkg:deb/debian/golang-1.25@1.25.7-1?distro=sid", "type": "deb", "namespace": "debian", "name": "golang-1.25", "version": "1.25.7-1", "qualifiers": { "distro": "sid" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "1.25.9-1", "latest_non_vulnerable_version": "1.25.9-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/64685?format=api", "vulnerability_id": "VCID-eyev-qpgs-hfbx", "summary": "cmd/cgo: Go cgo: Code smuggling due to comment parsing discrepancy", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61732.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61732.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-61732", "reference_id": "", "reference_type": "", "scores": [ { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00386", "published_at": "2026-04-04T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00365", "published_at": "2026-04-13T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00367", "published_at": "2026-04-12T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.0037", "published_at": "2026-04-11T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00372", "published_at": "2026-04-09T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00374", "published_at": "2026-04-07T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00371", "published_at": "2026-04-08T12:55:00Z" }, { "value": "7e-05", "scoring_system": "epss", "scoring_elements": "0.00621", "published_at": "2026-04-24T12:55:00Z" }, { "value": "7e-05", "scoring_system": "epss", "scoring_elements": "0.00522", "published_at": "2026-04-16T12:55:00Z" }, { "value": "7e-05", "scoring_system": "epss", "scoring_elements": "0.00526", "published_at": "2026-04-18T12:55:00Z" }, { "value": "7e-05", "scoring_system": "epss", "scoring_elements": "0.00623", "published_at": "2026-04-26T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-61732" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61732", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61732" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1127436", "reference_id": "1127436", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1127436" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437016", "reference_id": "2437016", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437016" }, { "reference_url": "https://go.dev/cl/734220", "reference_id": "734220", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-05T14:56:35Z/" } ], "url": "https://go.dev/cl/734220" }, { "reference_url": "https://go.dev/issue/76697", "reference_id": "76697", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-05T14:56:35Z/" } ], "url": "https://go.dev/issue/76697" }, { "reference_url": "https://pkg.go.dev/vuln/GO-2026-4433", "reference_id": "GO-2026-4433", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-05T14:56:35Z/" } ], "url": "https://pkg.go.dev/vuln/GO-2026-4433" }, { "reference_url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk", "reference_id": "K09ubi9FQFk", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-05T14:56:35Z/" } ], "url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2706", "reference_id": "RHSA-2026:2706", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2706" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2708", "reference_id": "RHSA-2026:2708", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2708" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2709", "reference_id": "RHSA-2026:2709", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2709" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2844", "reference_id": "RHSA-2026:2844", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2844" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3192", "reference_id": "RHSA-2026:3192", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3192" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3193", "reference_id": "RHSA-2026:3193", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3193" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3468", "reference_id": "RHSA-2026:3468", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3468" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3469", "reference_id": "RHSA-2026:3469", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3469" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3470", "reference_id": "RHSA-2026:3470", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3470" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3471", "reference_id": "RHSA-2026:3471", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3471" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3472", "reference_id": "RHSA-2026:3472", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3472" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3473", "reference_id": "RHSA-2026:3473", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3473" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3489", "reference_id": "RHSA-2026:3489", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3489" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3556", "reference_id": "RHSA-2026:3556", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3556" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3559", "reference_id": "RHSA-2026:3559", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3559" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3855", "reference_id": "RHSA-2026:3855", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3855" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4434", "reference_id": "RHSA-2026:4434", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4434" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:5133", "reference_id": "RHSA-2026:5133", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:5133" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:5907", "reference_id": "RHSA-2026:5907", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:5907" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:5948", "reference_id": "RHSA-2026:5948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:5948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:5950", "reference_id": "RHSA-2026:5950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:5950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:5952", "reference_id": "RHSA-2026:5952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:5952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:8448", "reference_id": "RHSA-2026:8448", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:8448" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/923850?format=api", "purl": "pkg:deb/debian/golang-1.25@1.25.7-1?distro=sid", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.25@1.25.7-1%3Fdistro=sid" }, { "url": "http://public2.vulnerablecode.io/api/packages/923846?format=api", "purl": "pkg:deb/debian/golang-1.25@1.25.8-1?distro=sid", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-245f-jhkn-w3ck" }, { "vulnerability": "VCID-91yp-p6st-8ucd" }, { "vulnerability": "VCID-ju53-xpej-3qca" }, { "vulnerability": "VCID-s176-xcrb-e3ea" }, { "vulnerability": "VCID-svbs-h3y5-wfbn" }, { "vulnerability": "VCID-t19m-gs1u-rbfp" }, { "vulnerability": "VCID-tf52-aa91-4kf3" }, { "vulnerability": "VCID-tmb1-tq9e-puhd" }, { "vulnerability": "VCID-vw1r-8zev-ykf4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.25@1.25.8-1%3Fdistro=sid" }, { "url": "http://public2.vulnerablecode.io/api/packages/1059618?format=api", "purl": "pkg:deb/debian/golang-1.25@1.25.9-1?distro=sid", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.25@1.25.9-1%3Fdistro=sid" } ], "aliases": [ "CVE-2025-61732" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "6.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eyev-qpgs-hfbx" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.25@1.25.7-1%3Fdistro=sid" }