Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/256762?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/256762?format=api", "vulnerability_id": "VCID-f663-qdnt-4fhz", "summary": "Incorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a project to modify the severity of an incident.", "aliases": [ { "alias": "CVE-2021-39902" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/371830?format=api", "purl": "pkg:alpm/archlinux/gitlab@14.5.0-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17gb-vdxv-fqc4" }, { "vulnerability": "VCID-1f4t-7du8-q3ex" }, { "vulnerability": "VCID-5t99-3qbr-sfdj" }, { "vulnerability": "VCID-6ns1-mx95-5ffe" }, { "vulnerability": "VCID-71j9-ra1c-6uhm" }, { "vulnerability": "VCID-989x-8yn6-eqc8" }, { "vulnerability": "VCID-99uy-2jrp-u7cx" }, { "vulnerability": "VCID-9mm8-knzf-a3gb" }, { "vulnerability": "VCID-9wuq-32s1-nydy" }, { "vulnerability": "VCID-buuk-gsy3-w7bp" }, { "vulnerability": "VCID-gvwq-zqmf-ruak" }, { "vulnerability": "VCID-h8td-pdxx-y7en" }, { "vulnerability": "VCID-j8nr-cgq2-ubf9" }, { "vulnerability": "VCID-m6c7-dfbf-r7gr" }, { "vulnerability": "VCID-n2jn-c1k6-67b9" }, { "vulnerability": "VCID-t8nq-hx26-kfc7" }, { "vulnerability": "VCID-uzq6-eukx-8yhv" }, { "vulnerability": "VCID-vfvr-mjgk-4qce" }, { "vulnerability": "VCID-w1jg-8rdt-3ufv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/gitlab@14.5.0-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/923289?format=api", "purl": "pkg:deb/debian/gitlab@15.10.8%2Bds1-2?distro=sid", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gitlab@15.10.8%252Bds1-2%3Fdistro=sid" }, { "url": "http://public2.vulnerablecode.io/api/packages/923255?format=api", "purl": "pkg:deb/debian/gitlab@17.6.5-19?distro=sid", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gitlab@17.6.5-19%3Fdistro=sid" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/371835?format=api", "purl": "pkg:alpm/archlinux/gitlab@14.3.3-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1bxs-yghe-cyck" }, { "vulnerability": "VCID-2uqd-mtms-fqaw" }, { "vulnerability": "VCID-54ws-nrwe-wucv" }, { "vulnerability": "VCID-6uvg-uqe6-tud1" }, { "vulnerability": "VCID-dana-dyhj-4yec" }, { "vulnerability": "VCID-de8b-d4wk-y3g2" }, { "vulnerability": "VCID-f663-qdnt-4fhz" }, { "vulnerability": "VCID-j6gp-wgz9-17h6" }, { "vulnerability": "VCID-r36y-zth9-2bbv" }, { "vulnerability": "VCID-sxfm-yjar-r3gy" }, { "vulnerability": "VCID-ubka-br7q-dyax" }, { "vulnerability": "VCID-utt5-yq43-tydb" }, { "vulnerability": "VCID-vqxg-nt2j-skcd" }, { "vulnerability": "VCID-w5ry-7u68-vbhz" }, { "vulnerability": "VCID-xm82-tdpb-buf6" }, { "vulnerability": "VCID-zy36-rb3k-y7eg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/gitlab@14.3.3-2" } ], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-39902", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00226", "scoring_system": "epss", "scoring_elements": "0.45329", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00226", "scoring_system": "epss", "scoring_elements": "0.45239", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00226", "scoring_system": "epss", "scoring_elements": "0.4532", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00226", "scoring_system": "epss", "scoring_elements": "0.45342", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00226", "scoring_system": "epss", "scoring_elements": "0.45285", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00226", "scoring_system": "epss", "scoring_elements": "0.4534", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00226", "scoring_system": "epss", "scoring_elements": "0.45362", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00226", "scoring_system": "epss", "scoring_elements": "0.4533", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00226", "scoring_system": "epss", "scoring_elements": "0.45332", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00226", "scoring_system": "epss", "scoring_elements": "0.45383", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00226", "scoring_system": "epss", "scoring_elements": "0.45379", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-39902" }, { "reference_url": "https://security.archlinux.org/AVG-2503", "reference_id": "AVG-2503", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2503" } ], "weaknesses": [], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-f663-qdnt-4fhz" }