Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/267367?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/267367?format=api", "vulnerability_id": "VCID-zkc9-huk8-27bc", "summary": "", "aliases": [ { "alias": "CVE-2026-28389" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1062575?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=riscv64&distroversion=v3.20&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=riscv64&distroversion=v3.20&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062571?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=aarch64&distroversion=v3.20&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=aarch64&distroversion=v3.20&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062572?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=armhf&distroversion=v3.20&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=armhf&distroversion=v3.20&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062573?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=armv7&distroversion=v3.20&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=armv7&distroversion=v3.20&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062574?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=ppc64le&distroversion=v3.20&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=ppc64le&distroversion=v3.20&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062576?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=s390x&distroversion=v3.20&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=s390x&distroversion=v3.20&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062577?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=x86&distroversion=v3.20&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=x86&distroversion=v3.20&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062578?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=x86_64&distroversion=v3.20&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=x86_64&distroversion=v3.20&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062606?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=aarch64&distroversion=v3.21&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=aarch64&distroversion=v3.21&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062607?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=armhf&distroversion=v3.21&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=armhf&distroversion=v3.21&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062608?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=armv7&distroversion=v3.21&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=armv7&distroversion=v3.21&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062609?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=loongarch64&distroversion=v3.21&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=loongarch64&distroversion=v3.21&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062613?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=x86&distroversion=v3.21&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=x86&distroversion=v3.21&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062614?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=x86_64&distroversion=v3.21&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=x86_64&distroversion=v3.21&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062610?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=ppc64le&distroversion=v3.21&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=ppc64le&distroversion=v3.21&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062611?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=riscv64&distroversion=v3.21&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=riscv64&distroversion=v3.21&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062612?format=api", "purl": "pkg:apk/alpine/openssl@3.3.7-r0?arch=s390x&distroversion=v3.21&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.3.7-r0%3Farch=s390x&distroversion=v3.21&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1059681?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=s390x&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=s390x&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1059682?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=x86&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=x86&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062615?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=aarch64&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=aarch64&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062616?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=armhf&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=armhf&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062617?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=armv7&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=armv7&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062618?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=loongarch64&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=loongarch64&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062619?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=ppc64le&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=ppc64le&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062620?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=riscv64&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=riscv64&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062621?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=s390x&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=s390x&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062758?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=aarch64&distroversion=v3.22&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=aarch64&distroversion=v3.22&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062765?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=x86&distroversion=v3.22&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=x86&distroversion=v3.22&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062766?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=x86_64&distroversion=v3.22&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=x86_64&distroversion=v3.22&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1059679?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=ppc64le&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=ppc64le&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1059680?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=riscv64&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=riscv64&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1059675?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=aarch64&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=aarch64&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1059676?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=armhf&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=armhf&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1059677?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=armv7&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=armv7&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1059678?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=loongarch64&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=loongarch64&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1059683?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=x86_64&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=x86_64&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062622?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=x86&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=x86&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062623?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=x86_64&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=x86_64&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062759?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=armhf&distroversion=v3.22&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=armhf&distroversion=v3.22&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062760?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=armv7&distroversion=v3.22&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=armv7&distroversion=v3.22&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062761?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=loongarch64&distroversion=v3.22&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=loongarch64&distroversion=v3.22&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062762?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=ppc64le&distroversion=v3.22&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=ppc64le&distroversion=v3.22&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062763?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=riscv64&distroversion=v3.22&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=riscv64&distroversion=v3.22&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062764?format=api", "purl": "pkg:apk/alpine/openssl@3.5.6-r0?arch=s390x&distroversion=v3.22&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@3.5.6-r0%3Farch=s390x&distroversion=v3.22&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/1052135?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/933949?format=api", "purl": "pkg:deb/debian/openssl@3.0.18-1~deb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gde-1md7-5yak" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.18-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1041990?format=api", "purl": "pkg:deb/debian/openssl@3.0.19-1~deb12u2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.19-1~deb12u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/933953?format=api", "purl": "pkg:deb/debian/openssl@3.5.5-1~deb13u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-7f9q-mhsr-8bfq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.5.5-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1041989?format=api", "purl": "pkg:deb/debian/openssl@3.5.5-1~deb13u2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.5.5-1~deb13u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062518?format=api", "purl": "pkg:deb/debian/openssl@3.6.2-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.6.2-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062954?format=api", "purl": "pkg:deb/debian/openssl@3.6.2-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.6.2-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/994513?format=api", "purl": "pkg:deb/debian/openssl@4.0.0~alpha1-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@4.0.0~alpha1-1" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/933951?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-87vs-4p6w-xbgq" }, { "vulnerability": "VCID-8gde-1md7-5yak" }, { "vulnerability": "VCID-cef8-2p5t-bff7" }, { "vulnerability": "VCID-f2na-rtsu-ffad" }, { "vulnerability": "VCID-hgvf-vxhr-cye8" }, { "vulnerability": "VCID-wuwm-ksb1-6qd5" }, { "vulnerability": "VCID-zkc9-huk8-27bc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050388?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6mua-rkdu-87ay" }, { "vulnerability": "VCID-7xwq-vdej-ayg1" }, { "vulnerability": "VCID-87vs-4p6w-xbgq" }, { "vulnerability": "VCID-8gde-1md7-5yak" }, { "vulnerability": "VCID-antn-nu5a-7yf6" }, { "vulnerability": "VCID-bfv6-sbnh-5uh5" }, { "vulnerability": "VCID-cef8-2p5t-bff7" }, { "vulnerability": "VCID-chgr-9utt-kqbp" }, { "vulnerability": "VCID-efpm-7cfa-z7hx" }, { "vulnerability": "VCID-f2na-rtsu-ffad" }, { "vulnerability": "VCID-fwwa-41df-zqfk" }, { "vulnerability": "VCID-gz4c-x1gb-muat" }, { "vulnerability": "VCID-hgvf-vxhr-cye8" }, { "vulnerability": "VCID-hpev-apm4-sqfw" }, { "vulnerability": "VCID-jq5s-hzam-zfda" }, { "vulnerability": "VCID-mg21-k76s-sqfp" }, { "vulnerability": "VCID-p7ca-uc7n-mfc4" }, { "vulnerability": "VCID-rgue-at15-k7a2" }, { "vulnerability": "VCID-sn5k-3e59-7ba8" }, { "vulnerability": "VCID-w9yg-3dbq-8qge" }, { "vulnerability": "VCID-wuwm-ksb1-6qd5" }, { "vulnerability": "VCID-zkc9-huk8-27bc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/994512?format=api", "purl": "pkg:deb/debian/openssl@3.6.1-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-74wu-sup9-cybb" }, { "vulnerability": "VCID-7f9q-mhsr-8bfq" }, { "vulnerability": "VCID-87vs-4p6w-xbgq" }, { "vulnerability": "VCID-cef8-2p5t-bff7" }, { "vulnerability": "VCID-f2na-rtsu-ffad" }, { "vulnerability": "VCID-hgvf-vxhr-cye8" }, { "vulnerability": "VCID-wuwm-ksb1-6qd5" }, { "vulnerability": "VCID-zkc9-huk8-27bc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.6.1-3" }, { "url": "http://public2.vulnerablecode.io/api/packages/933952?format=api", "purl": "pkg:deb/debian/openssl@3.6.1-3?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-74wu-sup9-cybb" }, { "vulnerability": "VCID-7f9q-mhsr-8bfq" }, { "vulnerability": "VCID-87vs-4p6w-xbgq" }, { "vulnerability": "VCID-cef8-2p5t-bff7" }, { "vulnerability": "VCID-f2na-rtsu-ffad" }, { "vulnerability": "VCID-hgvf-vxhr-cye8" }, { "vulnerability": "VCID-wuwm-ksb1-6qd5" }, { "vulnerability": "VCID-zkc9-huk8-27bc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.6.1-3%3Fdistro=trixie" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28389.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28389.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-28389", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.08405", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.08422", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00049", "scoring_system": "epss", "scoring_elements": "0.15107", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00049", "scoring_system": "epss", "scoring_elements": "0.15145", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.18229", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-28389" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28389", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28389" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "reference_id": "16cea4188e0ea567deb4f93f85902247e67384f5", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T20:20:14Z/" } ], "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "reference_url": "https://openssl-library.org/news/secadv/20260407.txt", "reference_id": "20260407.txt", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T20:20:14Z/" } ], "url": "https://openssl-library.org/news/secadv/20260407.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451096", "reference_id": "2451096", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451096" }, { "reference_url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "reference_id": "785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T20:20:14Z/" } ], "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "reference_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "reference_id": "7b5274e812400cacb6f3be4c2df5340923fa807f", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T20:20:14Z/" } ], "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "reference_url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "reference_id": "c6725634e089eb2b634b10ede33944be7248172a", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T20:20:14Z/" } ], "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "reference_url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "reference_id": "f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T20:20:14Z/" } ], "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "reference_url": "https://usn.ubuntu.com/8155-1/", "reference_id": "USN-8155-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/8155-1/" }, { "reference_url": "https://usn.ubuntu.com/8155-2/", "reference_id": "USN-8155-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/8155-2/" } ], "weaknesses": [ { "cwe_id": 166, "name": "Improper Handling of Missing Special Element", "description": "The product receives input from an upstream component, but it does not handle or incorrectly handles when an expected special element is missing." }, { "cwe_id": 476, "name": "NULL Pointer Dereference", "description": "A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit." } ], "exploits": [], "severity_range_score": "5.3 - 7.5", "exploitability": "0.5", "weighted_severity": "6.8", "risk_score": 3.4, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zkc9-huk8-27bc" }