Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/200604?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200604?format=api", "vulnerability_id": "VCID-mg42-38r1-v3cu", "summary": "Insight API transaction broadcast endpoint can result in Full Path Disclosure", "aliases": [ { "alias": "CVE-2018-1000023" }, { "alias": "GHSA-8p2p-p8mg-x3cw" } ], "fixed_packages": [], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/421420?format=api", "purl": "pkg:npm/insight-api@0.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@0.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/421421?format=api", "purl": "pkg:npm/insight-api@0.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@0.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/421422?format=api", "purl": "pkg:npm/insight-api@0.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@0.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/421423?format=api", "purl": "pkg:npm/insight-api@0.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@0.3.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/421424?format=api", "purl": "pkg:npm/insight-api@0.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@0.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/421425?format=api", "purl": "pkg:npm/insight-api@0.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@0.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/421426?format=api", "purl": "pkg:npm/insight-api@0.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@0.4.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/421427?format=api", "purl": "pkg:npm/insight-api@0.4.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@0.4.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/421428?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/421429?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/421430?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/421431?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/421432?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/421433?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/421434?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/421435?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/421436?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/421437?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/421438?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/421439?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/421440?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/421441?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/421442?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/421443?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/421444?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/421445?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/421446?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/421447?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.24" }, { "url": "http://public2.vulnerablecode.io/api/packages/421448?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/421449?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.26", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.26" }, { "url": "http://public2.vulnerablecode.io/api/packages/421450?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.27", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.27" }, { "url": "http://public2.vulnerablecode.io/api/packages/421451?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/421452?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/421453?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/421454?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.31", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.31" }, { "url": "http://public2.vulnerablecode.io/api/packages/421455?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/421456?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.33", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.33" }, { "url": "http://public2.vulnerablecode.io/api/packages/421457?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.34", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.34" }, { "url": "http://public2.vulnerablecode.io/api/packages/421458?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.35", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.35" }, { "url": "http://public2.vulnerablecode.io/api/packages/421459?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.36", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.36" }, { "url": "http://public2.vulnerablecode.io/api/packages/421460?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.37", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.37" }, { "url": "http://public2.vulnerablecode.io/api/packages/421461?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.38", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.38" }, { "url": "http://public2.vulnerablecode.io/api/packages/421462?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.39", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.39" }, { "url": "http://public2.vulnerablecode.io/api/packages/421463?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.40", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.40" }, { "url": "http://public2.vulnerablecode.io/api/packages/421464?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.41", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.41" }, { "url": "http://public2.vulnerablecode.io/api/packages/421465?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.42", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.42" }, { "url": "http://public2.vulnerablecode.io/api/packages/421466?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.43", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.43" }, { "url": "http://public2.vulnerablecode.io/api/packages/421467?format=api", "purl": "pkg:npm/insight-api@5.0.0-beta.44", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0-beta.44" }, { "url": "http://public2.vulnerablecode.io/api/packages/13088?format=api", "purl": "pkg:npm/insight-api@5.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mg42-38r1-v3cu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/insight-api@5.0.0" } ], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1000023", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00232", "scoring_system": "epss", "scoring_elements": "0.46408", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00232", "scoring_system": "epss", "scoring_elements": "0.46262", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00232", "scoring_system": "epss", "scoring_elements": "0.46404", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00232", "scoring_system": "epss", "scoring_elements": "0.46418", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1000023" }, { "reference_url": "https://github.com/bitpay/insight-api", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/bitpay/insight-api" }, { "reference_url": "https://github.com/bitpay/insight-api/issues/542", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/bitpay/insight-api/issues/542" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000023", "reference_id": "CVE-2018-1000023", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000023" }, { "reference_url": "https://github.com/advisories/GHSA-8p2p-p8mg-x3cw", "reference_id": "GHSA-8p2p-p8mg-x3cw", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8p2p-p8mg-x3cw" } ], "weaknesses": [ { "cwe_id": 20, "name": "Improper Input Validation", "description": "The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": "0.5", "weighted_severity": "6.2", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mg42-38r1-v3cu" }