GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/36134?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36134?format=api",
    "vulnerability_id": "VCID-ckay-6d62-ekb6",
    "summary": "NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The deserialization of Untrusted Data, may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.",
    "aliases": [
        {
            "alias": "CVE-2022-31605"
        },
        {
            "alias": "GHSA-hrf3-622q-8366"
        },
        {
            "alias": "PYSEC-2022-232"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28242?format=api",
            "purl": "pkg:pypi/nvflare@2.1.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.1.2"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28214?format=api",
            "purl": "pkg:pypi/nvflare@0.1.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@0.1.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28215?format=api",
            "purl": "pkg:pypi/nvflare@0.9.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@0.9.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28216?format=api",
            "purl": "pkg:pypi/nvflare@1.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@1.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28217?format=api",
            "purl": "pkg:pypi/nvflare@1.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@1.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28218?format=api",
            "purl": "pkg:pypi/nvflare@1.0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@1.0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28219?format=api",
            "purl": "pkg:pypi/nvflare@1.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@1.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28220?format=api",
            "purl": "pkg:pypi/nvflare@1.1.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@1.1.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28221?format=api",
            "purl": "pkg:pypi/nvflare@2.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28222?format=api",
            "purl": "pkg:pypi/nvflare@2.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28223?format=api",
            "purl": "pkg:pypi/nvflare@2.0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28224?format=api",
            "purl": "pkg:pypi/nvflare@2.0.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28225?format=api",
            "purl": "pkg:pypi/nvflare@2.0.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28226?format=api",
            "purl": "pkg:pypi/nvflare@2.0.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28227?format=api",
            "purl": "pkg:pypi/nvflare@2.0.6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28228?format=api",
            "purl": "pkg:pypi/nvflare@2.0.7",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28229?format=api",
            "purl": "pkg:pypi/nvflare@2.0.8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28230?format=api",
            "purl": "pkg:pypi/nvflare@2.0.9",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.9"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28231?format=api",
            "purl": "pkg:pypi/nvflare@2.0.10",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.10"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28232?format=api",
            "purl": "pkg:pypi/nvflare@2.0.11",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.11"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28233?format=api",
            "purl": "pkg:pypi/nvflare@2.0.12",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.12"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28234?format=api",
            "purl": "pkg:pypi/nvflare@2.0.13",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.13"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28235?format=api",
            "purl": "pkg:pypi/nvflare@2.0.14",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.14"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28236?format=api",
            "purl": "pkg:pypi/nvflare@2.0.15",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.15"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28237?format=api",
            "purl": "pkg:pypi/nvflare@2.0.16",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.16"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28238?format=api",
            "purl": "pkg:pypi/nvflare@2.0.18",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.18"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28239?format=api",
            "purl": "pkg:pypi/nvflare@2.0.19",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.19"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28240?format=api",
            "purl": "pkg:pypi/nvflare@2.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28241?format=api",
            "purl": "pkg:pypi/nvflare@2.1.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.1.1"
        }
    ],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-31605",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.02435",
                    "scoring_system": "epss",
                    "scoring_elements": "0.85439",
                    "published_at": "2026-06-04T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-31605"
        },
        {
            "reference_url": "https://github.com/NVIDIA/NVFlare",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/NVIDIA/NVFlare"
        },
        {
            "reference_url": "https://github.com/NVIDIA/NVFlare/commit/4de9782697ecb12f39bcae83221bd8d3498959be",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/NVIDIA/NVFlare/commit/4de9782697ecb12f39bcae83221bd8d3498959be"
        },
        {
            "reference_url": "https://github.com/NVIDIA/NVFlare/security/advisories/GHSA-hrf3-622q-8366",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/NVIDIA/NVFlare/security/advisories/GHSA-hrf3-622q-8366"
        },
        {
            "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/nvflare/PYSEC-2022-232.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/pypa/advisory-database/tree/main/vulns/nvflare/PYSEC-2022-232.yaml"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31605",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31605"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 502,
            "name": "Deserialization of Untrusted Data",
            "description": "The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid."
        }
    ],
    "exploits": [],
    "severity_range_score": "9.0 - 10.0",
    "exploitability": "0.5",
    "weighted_severity": "9.0",
    "risk_score": 4.5,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ckay-6d62-ekb6"
}