Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/2470?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2470?format=api",
    "vulnerability_id": "VCID-d999-v1md-4ud9",
    "summary": "multiple issues",
    "aliases": [
        {
            "alias": "CVE-2017-5085"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1153?format=api",
            "purl": "pkg:alpm/archlinux/chromium@59.0.3071.86-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-7xnc-6a4d-vyht"
                },
                {
                    "vulnerability": "VCID-9kxd-ubup-2yh8"
                },
                {
                    "vulnerability": "VCID-rha7-c9n6-pycv"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/chromium@59.0.3071.86-1"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1152?format=api",
            "purl": "pkg:alpm/archlinux/chromium@58.0.3029.110-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-35rw-bjxj-eqfc"
                },
                {
                    "vulnerability": "VCID-7xvp-feuq-4bdt"
                },
                {
                    "vulnerability": "VCID-9t9a-qs9x-rka9"
                },
                {
                    "vulnerability": "VCID-b5jp-c746-4ud9"
                },
                {
                    "vulnerability": "VCID-cskt-umqv-1qcj"
                },
                {
                    "vulnerability": "VCID-d999-v1md-4ud9"
                },
                {
                    "vulnerability": "VCID-eanb-gcyb-17ah"
                },
                {
                    "vulnerability": "VCID-ffuy-z4pq-4ydx"
                },
                {
                    "vulnerability": "VCID-g9tf-r2bp-6ugw"
                },
                {
                    "vulnerability": "VCID-m4rw-yqwv-fbg2"
                },
                {
                    "vulnerability": "VCID-mnw4-8h3k-u3gj"
                },
                {
                    "vulnerability": "VCID-nj35-e9yt-hyen"
                },
                {
                    "vulnerability": "VCID-py5k-jhry-2ucq"
                },
                {
                    "vulnerability": "VCID-uhre-3zte-4qhv"
                },
                {
                    "vulnerability": "VCID-v9y3-xk1b-gucx"
                },
                {
                    "vulnerability": "VCID-xqmb-sgkr-6udd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/chromium@58.0.3029.110-1"
        }
    ],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5085",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00443",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63617",
                    "published_at": "2026-05-30T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5085"
        },
        {
            "reference_url": "https://security.archlinux.org/ASA-201706-8",
            "reference_id": "ASA-201706-8",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-201706-8"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-289",
            "reference_id": "AVG-289",
            "reference_type": "",
            "scores": [
                {
                    "value": "Critical",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-289"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "9.0 - 10.0",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d999-v1md-4ud9"
}