GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/284094?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/284094?format=api",
    "vulnerability_id": "VCID-2pus-gn91-v3hh",
    "summary": "",
    "aliases": [
        {
            "alias": "CVE-2025-1816"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/174396?format=api",
            "purl": "pkg:deb/debian/ffmpeg@0?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@0%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/174383?format=api",
            "purl": "pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-18kj-v9br-xydz"
                },
                {
                    "vulnerability": "VCID-cf63-ckqc-m3b2"
                },
                {
                    "vulnerability": "VCID-ngq1-s8bn-33a8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/174381?format=api",
            "purl": "pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-18kj-v9br-xydz"
                },
                {
                    "vulnerability": "VCID-5cp2-7jz1-vfgy"
                },
                {
                    "vulnerability": "VCID-6bn5-51tk-gkab"
                },
                {
                    "vulnerability": "VCID-6kuf-y5wp-tqbw"
                },
                {
                    "vulnerability": "VCID-hrtb-qx68-xqhw"
                },
                {
                    "vulnerability": "VCID-k69d-ftew-bqfc"
                },
                {
                    "vulnerability": "VCID-qrtm-m63h-c3fd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/174643?format=api",
            "purl": "pkg:deb/debian/ffmpeg@7:7.1.1-1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.1-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/174386?format=api",
            "purl": "pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-hrtb-qx68-xqhw"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/174385?format=api",
            "purl": "pkg:deb/debian/ffmpeg@7:8.1.1-3?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1.1-3%3Fdistro=trixie"
        }
    ],
    "affected_packages": [],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-1816",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00088",
                    "scoring_system": "epss",
                    "scoring_elements": "0.25141",
                    "published_at": "2026-05-30T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-1816"
        },
        {
            "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                }
            ],
            "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
        },
        {
            "reference_url": "https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/0526535cd58444dd264e810b2f3348b4d96cff3b",
            "reference_id": "0526535cd58444dd264e810b2f3348b4d96cff3b",
            "reference_type": "",
            "scores": [
                {
                    "value": "5",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "5.3",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-03T20:12:17Z/"
                }
            ],
            "url": "https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/0526535cd58444dd264e810b2f3348b4d96cff3b"
        },
        {
            "reference_url": "https://trac.ffmpeg.org/ticket/11475",
            "reference_id": "11475",
            "reference_type": "",
            "scores": [
                {
                    "value": "5",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "5.3",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-03T20:12:17Z/"
                }
            ],
            "url": "https://trac.ffmpeg.org/ticket/11475"
        },
        {
            "reference_url": "https://vuldb.com/?ctiid.298089",
            "reference_id": "?ctiid.298089",
            "reference_type": "",
            "scores": [
                {
                    "value": "5",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "5.3",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-03T20:12:17Z/"
                }
            ],
            "url": "https://vuldb.com/?ctiid.298089"
        },
        {
            "reference_url": "https://ffmpeg.org/",
            "reference_id": "ffmpeg.org",
            "reference_type": "",
            "scores": [
                {
                    "value": "5",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "5.3",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-03T20:12:17Z/"
                }
            ],
            "url": "https://ffmpeg.org/"
        },
        {
            "reference_url": "https://vuldb.com/?id.298089",
            "reference_id": "?id.298089",
            "reference_type": "",
            "scores": [
                {
                    "value": "5",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "5.3",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-03T20:12:17Z/"
                }
            ],
            "url": "https://vuldb.com/?id.298089"
        },
        {
            "reference_url": "https://trac.ffmpeg.org/attachment/ticket/11475/poc",
            "reference_id": "poc",
            "reference_type": "",
            "scores": [
                {
                    "value": "5",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "5.3",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-03T20:12:17Z/"
                }
            ],
            "url": "https://trac.ffmpeg.org/attachment/ticket/11475/poc"
        },
        {
            "reference_url": "https://vuldb.com/?submit.506575",
            "reference_id": "?submit.506575",
            "reference_type": "",
            "scores": [
                {
                    "value": "5",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                },
                {
                    "value": "5.3",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-03T20:12:17Z/"
                }
            ],
            "url": "https://vuldb.com/?submit.506575"
        },
        {
            "reference_url": "https://usn.ubuntu.com/7538-1/",
            "reference_id": "USN-7538-1",
            "reference_type": "",
            "scores": [],
            "url": "https://usn.ubuntu.com/7538-1/"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 401,
            "name": "Missing Release of Memory after Effective Lifetime",
            "description": "The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory."
        },
        {
            "cwe_id": 404,
            "name": "Improper Resource Shutdown or Release",
            "description": "The product does not release or incorrectly releases a resource before it is made available for re-use."
        }
    ],
    "exploits": [],
    "severity_range_score": "4.3 - 5.3",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2pus-gn91-v3hh"
}