Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/934546?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/934546?format=api", "purl": "pkg:deb/debian/pcre2@0?distro=trixie", "type": "deb", "namespace": "debian", "name": "pcre2", "version": "0", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "10.21-1", "latest_non_vulnerable_version": "10.46-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34916?format=api", "vulnerability_id": "VCID-3vg3-y6dk-n3ag", "summary": "Multiple vulnerabilities have been found in libpcre, the worst of\n which could lead to arbitrary code execution, or cause a Denial of Service\n condition.", "references": [ { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178193.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178193.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178955.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178955.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-1283", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0251", "scoring_system": "epss", "scoring_elements": "0.85368", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0251", "scoring_system": "epss", "scoring_elements": "0.85373", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0251", "scoring_system": "epss", "scoring_elements": "0.85371", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.0251", "scoring_system": "epss", "scoring_elements": "0.85388", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.0251", "scoring_system": "epss", "scoring_elements": "0.85387", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0251", "scoring_system": "epss", "scoring_elements": "0.85408", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.0251", "scoring_system": "epss", "scoring_elements": "0.85385", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.02952", "scoring_system": "epss", "scoring_elements": "0.86456", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.02952", "scoring_system": "epss", "scoring_elements": "0.86428", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.02952", "scoring_system": "epss", "scoring_elements": "0.86447", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.03762", "scoring_system": "epss", "scoring_elements": "0.87983", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.03762", "scoring_system": "epss", "scoring_elements": "0.88006", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.03762", "scoring_system": "epss", "scoring_elements": "0.87992", "published_at": "2026-04-02T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-1283" }, { "reference_url": "https://bto.bluecoat.com/security-advisory/sa128", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bto.bluecoat.com/security-advisory/sa128" }, { "reference_url": "https://bugs.exim.org/show_bug.cgi?id=1767", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugs.exim.org/show_bug.cgi?id=1767" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1283", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1283" }, { "reference_url": "https://www.tenable.com/security/tns-2016-18", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.tenable.com/security/tns-2016-18" }, { "reference_url": "https://www.tenable.com/security/tns-2017-14", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.tenable.com/security/tns-2017-14" }, { "reference_url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html" }, { "reference_url": "http://www.securityfocus.com/bid/79825", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/79825" }, { "reference_url": "http://www.securitytracker.com/id/1034555", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1034555" }, { "reference_url": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1295385", "reference_id": "1295385", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1295385" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=809706", "reference_id": "809706", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=809706" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:pcre:pcre:8.38:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:pcre:pcre:8.38:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:pcre:pcre:8.38:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1283", "reference_id": "CVE-2016-1283", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:P/I:P/A:P" }, { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1283" }, { "reference_url": "https://security.gentoo.org/glsa/201607-02", "reference_id": "GLSA-201607-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201607-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1132", "reference_id": "RHSA-2016:1132", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1132" }, { "reference_url": "https://usn.ubuntu.com/2943-1/", "reference_id": "USN-2943-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2943-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/934546?format=api", "purl": "pkg:deb/debian/pcre2@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934547?format=api", "purl": "pkg:deb/debian/pcre2@10.36-2%2Bdeb11u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-puhw-2qwq-gqet" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.36-2%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934545?format=api", "purl": "pkg:deb/debian/pcre2@10.42-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.42-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934549?format=api", "purl": "pkg:deb/debian/pcre2@10.46-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.46-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934548?format=api", "purl": "pkg:deb/debian/pcre2@10.46-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.46-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2016-1283" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3vg3-y6dk-n3ag" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7911?format=api", "vulnerability_id": "VCID-eq8x-wkjr-zyf7", "summary": "Improper Restriction of Operations within the Bounds of a Memory Buffer\nPCRE2 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a \"pattern with very many captures.\"", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-8399", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.85907", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.86007", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.85996", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.85987", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.85919", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.85935", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.85937", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.85955", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.85966", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.8598", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.85978", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.85973", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.02737", "scoring_system": "epss", "scoring_elements": "0.85992", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-8399" }, { "reference_url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=783", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=783" }, { "reference_url": "https://vcs.pcre.org/pcre2/code/tags/pcre2-10.30/ChangeLog?revision=854&view=markup", "reference_id": "", "reference_type": "", "scores": [], "url": "https://vcs.pcre.org/pcre2/code/tags/pcre2-10.30/ChangeLog?revision=854&view=markup" }, { "reference_url": "https://vcs.pcre.org/pcre2?view=revision&revision=674", "reference_id": "", "reference_type": "", "scores": [], "url": "https://vcs.pcre.org/pcre2?view=revision&revision=674" }, { "reference_url": "http://www.securityfocus.com/bid/98315", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/98315" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1449629", "reference_id": "1449629", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1449629" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:pcre:pcre2:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:pcre:pcre2:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:pcre:pcre2:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-8399", "reference_id": "CVE-2017-8399", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:P/I:P/A:P" }, { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-8399" }, { "reference_url": "https://security.gentoo.org/glsa/201710-09", "reference_id": "GLSA-201710-09", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201710-09" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/934546?format=api", "purl": "pkg:deb/debian/pcre2@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934547?format=api", "purl": "pkg:deb/debian/pcre2@10.36-2%2Bdeb11u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-puhw-2qwq-gqet" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.36-2%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934545?format=api", "purl": "pkg:deb/debian/pcre2@10.42-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.42-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934549?format=api", "purl": "pkg:deb/debian/pcre2@10.46-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.46-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934548?format=api", "purl": "pkg:deb/debian/pcre2@10.46-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.46-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2017-8399" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eq8x-wkjr-zyf7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/68210?format=api", "vulnerability_id": "VCID-hmzr-t319-kybz", "summary": "pcre2: PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-58050.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-58050.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-58050", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.0983", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09905", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09903", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09909", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09872", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09857", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09739", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.0971", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.0986", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.0988", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09778", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.0985", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-58050" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1112278", "reference_id": "1112278", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1112278" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2391338", "reference_id": "2391338", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2391338" }, { "reference_url": "https://github.com/PCRE2Project/pcre2/commit/a141712e5967d448c7ce13090ab530c8e3d82254", "reference_id": "a141712e5967d448c7ce13090ab530c8e3d82254", "reference_type": "", "scores": [ { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-27T19:14:21Z/" } ], "url": "https://github.com/PCRE2Project/pcre2/commit/a141712e5967d448c7ce13090ab530c8e3d82254" }, { "reference_url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-c2gv-xgf5-5cc2", "reference_id": "GHSA-c2gv-xgf5-5cc2", "reference_type": "", "scores": [ { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-27T19:14:21Z/" } ], "url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-c2gv-xgf5-5cc2" }, { "reference_url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.46", "reference_id": "pcre2-10.46", "reference_type": "", "scores": [ { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-27T19:14:21Z/" } ], "url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.46" }, { "reference_url": "https://usn.ubuntu.com/7777-1/", "reference_id": "USN-7777-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7777-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/934546?format=api", "purl": "pkg:deb/debian/pcre2@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934547?format=api", "purl": "pkg:deb/debian/pcre2@10.36-2%2Bdeb11u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-puhw-2qwq-gqet" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.36-2%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934545?format=api", "purl": "pkg:deb/debian/pcre2@10.42-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.42-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934549?format=api", "purl": "pkg:deb/debian/pcre2@10.46-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.46-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934548?format=api", "purl": "pkg:deb/debian/pcre2@10.46-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.46-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-58050" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hmzr-t319-kybz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34899?format=api", "vulnerability_id": "VCID-va26-j6rt-buab", "summary": "Multiple vulnerabilities have been found in libpcre, the worst of\n which could lead to arbitrary code execution, or cause a Denial of Service\n condition.", "references": [ { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173700.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173700.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-8380", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.7928", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.79173", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.79179", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.79203", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.79189", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.79214", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.79222", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.79246", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.7923", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.79221", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.79247", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.79244", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.01238", "scoring_system": "epss", "scoring_elements": "0.79245", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-8380" }, { "reference_url": "https://blog.fuzzing-project.org/29-Heap-Overflow-in-PCRE.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://blog.fuzzing-project.org/29-Heap-Overflow-in-PCRE.html" }, { "reference_url": "https://bto.bluecoat.com/security-advisory/sa128", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bto.bluecoat.com/security-advisory/sa128" }, { "reference_url": "https://bugs.exim.org/show_bug.cgi?id=1637", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugs.exim.org/show_bug.cgi?id=1637" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380" }, { "reference_url": "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup", "reference_id": "", "reference_type": "", "scores": [], "url": "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2015/11/29/1", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.openwall.com/lists/oss-security/2015/11/29/1" }, { "reference_url": "http://www.securityfocus.com/bid/77695", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/77695" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1285413", "reference_id": "1285413", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1285413" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806467", "reference_id": "806467", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806467" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:pcre:perl_compatible_regular_expression_library:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:pcre:perl_compatible_regular_expression_library:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:pcre:perl_compatible_regular_expression_library:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8380", "reference_id": "CVE-2015-8380", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:P/I:P/A:P" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8380" }, { "reference_url": "https://security.gentoo.org/glsa/201607-02", "reference_id": "GLSA-201607-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201607-02" }, { "reference_url": "https://usn.ubuntu.com/2943-1/", "reference_id": "USN-2943-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2943-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/934546?format=api", "purl": "pkg:deb/debian/pcre2@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934547?format=api", "purl": "pkg:deb/debian/pcre2@10.36-2%2Bdeb11u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-puhw-2qwq-gqet" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.36-2%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934545?format=api", "purl": "pkg:deb/debian/pcre2@10.42-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.42-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934549?format=api", "purl": "pkg:deb/debian/pcre2@10.46-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.46-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934548?format=api", "purl": "pkg:deb/debian/pcre2@10.46-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@10.46-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2015-8380" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-va26-j6rt-buab" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pcre2@0%3Fdistro=trixie" }