Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/256764?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/256764?format=api", "vulnerability_id": "VCID-2uqd-mtms-fqaw", "summary": "In all versions of GitLab CE/EE since version 13.0, a privileged user, through an API call, can change the visibility level of a group or a project to a restricted option even after the instance administrator sets that visibility option as restricted in settings.", "aliases": [ { "alias": "CVE-2021-39903" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/371830?format=api", "purl": "pkg:alpm/archlinux/gitlab@14.5.0-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17gb-vdxv-fqc4" }, { "vulnerability": "VCID-1f4t-7du8-q3ex" }, { "vulnerability": "VCID-5t99-3qbr-sfdj" }, { "vulnerability": "VCID-6ns1-mx95-5ffe" }, { "vulnerability": "VCID-71j9-ra1c-6uhm" }, { "vulnerability": "VCID-989x-8yn6-eqc8" }, { "vulnerability": "VCID-99uy-2jrp-u7cx" }, { "vulnerability": "VCID-9mm8-knzf-a3gb" }, { "vulnerability": "VCID-9wuq-32s1-nydy" }, { "vulnerability": "VCID-buuk-gsy3-w7bp" }, { "vulnerability": "VCID-gvwq-zqmf-ruak" }, { "vulnerability": "VCID-h8td-pdxx-y7en" }, { "vulnerability": "VCID-j8nr-cgq2-ubf9" }, { "vulnerability": "VCID-m6c7-dfbf-r7gr" }, { "vulnerability": "VCID-n2jn-c1k6-67b9" }, { "vulnerability": "VCID-t8nq-hx26-kfc7" }, { "vulnerability": "VCID-uzq6-eukx-8yhv" }, { "vulnerability": "VCID-vfvr-mjgk-4qce" }, { "vulnerability": "VCID-w1jg-8rdt-3ufv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/gitlab@14.5.0-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/923289?format=api", "purl": "pkg:deb/debian/gitlab@15.10.8%2Bds1-2?distro=sid", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gitlab@15.10.8%252Bds1-2%3Fdistro=sid" }, { "url": "http://public2.vulnerablecode.io/api/packages/923255?format=api", "purl": "pkg:deb/debian/gitlab@17.6.5-19?distro=sid", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gitlab@17.6.5-19%3Fdistro=sid" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/371835?format=api", "purl": "pkg:alpm/archlinux/gitlab@14.3.3-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1bxs-yghe-cyck" }, { "vulnerability": "VCID-2uqd-mtms-fqaw" }, { "vulnerability": "VCID-54ws-nrwe-wucv" }, { "vulnerability": "VCID-6uvg-uqe6-tud1" }, { "vulnerability": "VCID-dana-dyhj-4yec" }, { "vulnerability": "VCID-de8b-d4wk-y3g2" }, { "vulnerability": "VCID-f663-qdnt-4fhz" }, { "vulnerability": "VCID-j6gp-wgz9-17h6" }, { "vulnerability": "VCID-r36y-zth9-2bbv" }, { "vulnerability": "VCID-sxfm-yjar-r3gy" }, { "vulnerability": "VCID-ubka-br7q-dyax" }, { "vulnerability": "VCID-utt5-yq43-tydb" }, { "vulnerability": "VCID-vqxg-nt2j-skcd" }, { "vulnerability": "VCID-w5ry-7u68-vbhz" }, { "vulnerability": "VCID-xm82-tdpb-buf6" }, { "vulnerability": "VCID-zy36-rb3k-y7eg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/gitlab@14.3.3-2" } ], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-39903", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00254", "scoring_system": "epss", "scoring_elements": "0.48802", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00254", "scoring_system": "epss", "scoring_elements": "0.48729", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00254", "scoring_system": "epss", "scoring_elements": "0.48768", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00254", "scoring_system": "epss", "scoring_elements": "0.48794", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00254", "scoring_system": "epss", "scoring_elements": "0.48748", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00254", "scoring_system": "epss", "scoring_elements": "0.48803", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00254", "scoring_system": "epss", "scoring_elements": "0.488", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00254", "scoring_system": "epss", "scoring_elements": "0.48817", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00254", "scoring_system": "epss", "scoring_elements": "0.48791", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00254", "scoring_system": "epss", "scoring_elements": "0.48798", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00254", "scoring_system": "epss", "scoring_elements": "0.48847", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00254", "scoring_system": "epss", "scoring_elements": "0.48843", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-39903" }, { "reference_url": "https://security.archlinux.org/AVG-2503", "reference_id": "AVG-2503", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2503" } ], "weaknesses": [], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2uqd-mtms-fqaw" }