Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1638?format=api",
    "vulnerability_id": "VCID-4w3a-v61n-jkcx",
    "summary": "The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded.",
    "aliases": [
        {
            "alias": "CVE-2019-11728"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1677?format=api",
            "purl": "pkg:alpm/archlinux/firefox@68.0-1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@68.0-1"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1676?format=api",
            "purl": "pkg:alpm/archlinux/firefox@67.0.4-2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1btz-x11h-wbe3"
                },
                {
                    "vulnerability": "VCID-4w3a-v61n-jkcx"
                },
                {
                    "vulnerability": "VCID-5yxj-ktrh-v3gf"
                },
                {
                    "vulnerability": "VCID-9pa6-vyv2-jug4"
                },
                {
                    "vulnerability": "VCID-9wkp-gr2p-kuda"
                },
                {
                    "vulnerability": "VCID-a3bk-967p-tbey"
                },
                {
                    "vulnerability": "VCID-cfkw-sswh-fug7"
                },
                {
                    "vulnerability": "VCID-cqss-xjk2-jqaa"
                },
                {
                    "vulnerability": "VCID-cy4e-wn65-5yek"
                },
                {
                    "vulnerability": "VCID-e6xc-18vy-zbgs"
                },
                {
                    "vulnerability": "VCID-jqgr-fga1-1uh6"
                },
                {
                    "vulnerability": "VCID-mcak-bqyw-vygx"
                },
                {
                    "vulnerability": "VCID-mrja-sepm-bkg9"
                },
                {
                    "vulnerability": "VCID-ru48-fc55-3uas"
                },
                {
                    "vulnerability": "VCID-rx6n-n9kd-9ffx"
                },
                {
                    "vulnerability": "VCID-uebp-t2se-kyaq"
                },
                {
                    "vulnerability": "VCID-ufuu-gskv-e7ah"
                },
                {
                    "vulnerability": "VCID-uyn9-fbsk-43ah"
                },
                {
                    "vulnerability": "VCID-x19a-2343-jfce"
                },
                {
                    "vulnerability": "VCID-x7sq-a7f4-97gx"
                },
                {
                    "vulnerability": "VCID-xavu-ygkk-u3fn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@67.0.4-2"
        }
    ],
    "references": [
        {
            "reference_url": "https://security.archlinux.org/ASA-201907-4",
            "reference_id": "ASA-201907-4",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-201907-4"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-1002",
            "reference_id": "AVG-1002",
            "reference_type": "",
            "scores": [
                {
                    "value": "Critical",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-1002"
        },
        {
            "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21",
            "reference_id": "mfsa2019-21",
            "reference_type": "",
            "scores": [
                {
                    "value": "critical",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21"
        },
        {
            "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-28",
            "reference_id": "mfsa2019-28",
            "reference_type": "",
            "scores": [
                {
                    "value": "critical",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-28"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "9.0 - 10.0",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4w3a-v61n-jkcx"
}