Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/2661?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2661?format=api",
    "vulnerability_id": "VCID-gfbp-67ac-qkgy",
    "summary": "multiple issues",
    "aliases": [
        {
            "alias": "CVE-2017-5015"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1189?format=api",
            "purl": "pkg:alpm/archlinux/chromium@56.0.2924.76-1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/chromium@56.0.2924.76-1"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1188?format=api",
            "purl": "pkg:alpm/archlinux/chromium@55.0.2883.87-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1yfh-r4mn-b7cx"
                },
                {
                    "vulnerability": "VCID-2q2m-h7ws-f7cq"
                },
                {
                    "vulnerability": "VCID-3gz2-f5wm-uqc2"
                },
                {
                    "vulnerability": "VCID-4q82-tvqc-6yfr"
                },
                {
                    "vulnerability": "VCID-5xkt-8auh-yyg7"
                },
                {
                    "vulnerability": "VCID-6cgk-qs2q-k7ed"
                },
                {
                    "vulnerability": "VCID-6kyr-2xah-3qbg"
                },
                {
                    "vulnerability": "VCID-73pu-m5n1-dqhm"
                },
                {
                    "vulnerability": "VCID-81e8-qb37-5uct"
                },
                {
                    "vulnerability": "VCID-8r56-2k5d-wqac"
                },
                {
                    "vulnerability": "VCID-8sk5-qkbn-zuew"
                },
                {
                    "vulnerability": "VCID-egr3-uk99-bfdd"
                },
                {
                    "vulnerability": "VCID-euhj-hrer-xqfa"
                },
                {
                    "vulnerability": "VCID-eyqa-1hyz-a3ca"
                },
                {
                    "vulnerability": "VCID-gfbp-67ac-qkgy"
                },
                {
                    "vulnerability": "VCID-h1y8-yb4k-pqgm"
                },
                {
                    "vulnerability": "VCID-j4k4-q3wr-qfh8"
                },
                {
                    "vulnerability": "VCID-pw3y-5q34-s3d8"
                },
                {
                    "vulnerability": "VCID-r3mr-cr51-ube9"
                },
                {
                    "vulnerability": "VCID-u1n2-y3md-z7aa"
                },
                {
                    "vulnerability": "VCID-zktu-wnnj-tfgr"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/chromium@55.0.2883.87-1"
        }
    ],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5015",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00556",
                    "scoring_system": "epss",
                    "scoring_elements": "0.68467",
                    "published_at": "2026-05-30T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5015"
        },
        {
            "reference_url": "https://security.archlinux.org/ASA-201701-33",
            "reference_id": "ASA-201701-33",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-201701-33"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-156",
            "reference_id": "AVG-156",
            "reference_type": "",
            "scores": [
                {
                    "value": "Critical",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-156"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "9.0 - 10.0",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gfbp-67ac-qkgy"
}