Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/35666?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35666?format=api", "vulnerability_id": "VCID-n4r1-ckx3-r7ht", "summary": "Synopsys hub-rest-api-python (aka blackduck on PyPI) version 0.0.25 - 0.0.52 does not validate SSL certificates in certain cases.", "aliases": [ { "alias": "CVE-2020-27589" }, { "alias": "GHSA-f248-v4qh-x2r6" }, { "alias": "PYSEC-2020-26" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/18716?format=api", "purl": "pkg:pypi/blackduck@0.0.53", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.53" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/18688?format=api", "purl": "pkg:pypi/blackduck@0.0.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/18689?format=api", "purl": "pkg:pypi/blackduck@0.0.26", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.26" }, { "url": "http://public2.vulnerablecode.io/api/packages/18690?format=api", "purl": "pkg:pypi/blackduck@0.0.27", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.27" }, { "url": "http://public2.vulnerablecode.io/api/packages/18691?format=api", "purl": "pkg:pypi/blackduck@0.0.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/18692?format=api", "purl": "pkg:pypi/blackduck@0.0.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/18693?format=api", "purl": "pkg:pypi/blackduck@0.0.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/18694?format=api", "purl": "pkg:pypi/blackduck@0.0.31", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.31" }, { "url": "http://public2.vulnerablecode.io/api/packages/18695?format=api", "purl": "pkg:pypi/blackduck@0.0.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/18696?format=api", "purl": "pkg:pypi/blackduck@0.0.33", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.33" }, { "url": "http://public2.vulnerablecode.io/api/packages/18697?format=api", "purl": "pkg:pypi/blackduck@0.0.34", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.34" }, { "url": "http://public2.vulnerablecode.io/api/packages/18698?format=api", "purl": "pkg:pypi/blackduck@0.0.35", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.35" }, { "url": "http://public2.vulnerablecode.io/api/packages/18699?format=api", "purl": "pkg:pypi/blackduck@0.0.36", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.36" }, { "url": "http://public2.vulnerablecode.io/api/packages/18700?format=api", "purl": "pkg:pypi/blackduck@0.0.37", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.37" }, { "url": "http://public2.vulnerablecode.io/api/packages/18701?format=api", "purl": "pkg:pypi/blackduck@0.0.38", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.38" }, { "url": "http://public2.vulnerablecode.io/api/packages/18702?format=api", "purl": "pkg:pypi/blackduck@0.0.39", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.39" }, { "url": "http://public2.vulnerablecode.io/api/packages/18703?format=api", "purl": "pkg:pypi/blackduck@0.0.40", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.40" }, { "url": "http://public2.vulnerablecode.io/api/packages/18704?format=api", "purl": "pkg:pypi/blackduck@0.0.41", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.41" }, { "url": "http://public2.vulnerablecode.io/api/packages/18705?format=api", "purl": "pkg:pypi/blackduck@0.0.42", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.42" }, { "url": "http://public2.vulnerablecode.io/api/packages/18706?format=api", "purl": "pkg:pypi/blackduck@0.0.43", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.43" }, { "url": "http://public2.vulnerablecode.io/api/packages/18707?format=api", "purl": "pkg:pypi/blackduck@0.0.44", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.44" }, { "url": "http://public2.vulnerablecode.io/api/packages/18708?format=api", "purl": "pkg:pypi/blackduck@0.0.45", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.45" }, { "url": "http://public2.vulnerablecode.io/api/packages/18709?format=api", "purl": "pkg:pypi/blackduck@0.0.46", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.46" }, { "url": "http://public2.vulnerablecode.io/api/packages/18710?format=api", "purl": "pkg:pypi/blackduck@0.0.47", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.47" }, { "url": "http://public2.vulnerablecode.io/api/packages/18711?format=api", "purl": "pkg:pypi/blackduck@0.0.48", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.48" }, { "url": "http://public2.vulnerablecode.io/api/packages/18712?format=api", "purl": "pkg:pypi/blackduck@0.0.49", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.49" }, { "url": "http://public2.vulnerablecode.io/api/packages/18713?format=api", "purl": "pkg:pypi/blackduck@0.0.50", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.50" }, { "url": "http://public2.vulnerablecode.io/api/packages/18714?format=api", "purl": "pkg:pypi/blackduck@0.0.51", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.51" }, { "url": "http://public2.vulnerablecode.io/api/packages/18715?format=api", "purl": "pkg:pypi/blackduck@0.0.52", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n4r1-ckx3-r7ht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/blackduck@0.0.52" } ], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-27589", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00198", "scoring_system": "epss", "scoring_elements": "0.41743", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00198", "scoring_system": "epss", "scoring_elements": "0.41713", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00198", "scoring_system": "epss", "scoring_elements": "0.41736", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00198", "scoring_system": "epss", "scoring_elements": "0.41661", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-27589" }, { "reference_url": "https://community.synopsys.com/s/question/0D52H00005JCZAXSA5/announcement-black-duck-defect-identified", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://community.synopsys.com/s/question/0D52H00005JCZAXSA5/announcement-black-duck-defect-identified" }, { "reference_url": "https://github.com/advisories/GHSA-f248-v4qh-x2r6", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f248-v4qh-x2r6" }, { "reference_url": "https://github.com/blackducksoftware/hub-rest-api-python", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/blackducksoftware/hub-rest-api-python" }, { "reference_url": "https://github.com/blackducksoftware/hub-rest-api-python/commit/0a25777117515b8b4ff287a98f57837a8c6bdbdb", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/blackducksoftware/hub-rest-api-python/commit/0a25777117515b8b4ff287a98f57837a8c6bdbdb" }, { "reference_url": "https://github.com/blackducksoftware/hub-rest-api-python/pull/113", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/blackducksoftware/hub-rest-api-python/pull/113" }, { "reference_url": "https://github.com/blackducksoftware/hub-rest-api-python/pull/113/commits/273b27d0de1004389dd8cf43c40b1197c787e7cd", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/blackducksoftware/hub-rest-api-python/pull/113/commits/273b27d0de1004389dd8cf43c40b1197c787e7cd" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/blackduck/PYSEC-2020-26.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/blackduck/PYSEC-2020-26.yaml" }, { "reference_url": "https://pypi.org/project/blackduck", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://pypi.org/project/blackduck" }, { "reference_url": "https://pypi.org/project/blackduck/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://pypi.org/project/blackduck/" }, { "reference_url": "https://www.optiv.com/explore-optiv-insights/source-zero/certificate-validation-disabled-black-duck-api-wrapper", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.optiv.com/explore-optiv-insights/source-zero/certificate-validation-disabled-black-duck-api-wrapper" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27589", "reference_id": "CVE-2020-27589", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27589" } ], "weaknesses": [ { "cwe_id": 295, "name": "Improper Certificate Validation", "description": "The product does not validate, or incorrectly validates, a certificate." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n4r1-ckx3-r7ht" }