GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/36134?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36134?format=api",
    "vulnerability_id": "VCID-ckay-6d62-ekb6",
    "summary": "NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The deserialization of Untrusted Data, may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.",
    "aliases": [
        {
            "alias": "CVE-2022-31605"
        },
        {
            "alias": "GHSA-hrf3-622q-8366"
        },
        {
            "alias": "PYSEC-2022-232"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28242?format=api",
            "purl": "pkg:pypi/nvflare@2.1.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.1.2"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28214?format=api",
            "purl": "pkg:pypi/nvflare@0.1.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@0.1.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28215?format=api",
            "purl": "pkg:pypi/nvflare@0.9.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@0.9.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28216?format=api",
            "purl": "pkg:pypi/nvflare@1.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@1.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28217?format=api",
            "purl": "pkg:pypi/nvflare@1.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@1.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28218?format=api",
            "purl": "pkg:pypi/nvflare@1.0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@1.0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28219?format=api",
            "purl": "pkg:pypi/nvflare@1.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@1.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28220?format=api",
            "purl": "pkg:pypi/nvflare@1.1.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@1.1.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28221?format=api",
            "purl": "pkg:pypi/nvflare@2.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28222?format=api",
            "purl": "pkg:pypi/nvflare@2.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28223?format=api",
            "purl": "pkg:pypi/nvflare@2.0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28224?format=api",
            "purl": "pkg:pypi/nvflare@2.0.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28225?format=api",
            "purl": "pkg:pypi/nvflare@2.0.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28226?format=api",
            "purl": "pkg:pypi/nvflare@2.0.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28227?format=api",
            "purl": "pkg:pypi/nvflare@2.0.6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28228?format=api",
            "purl": "pkg:pypi/nvflare@2.0.7",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28229?format=api",
            "purl": "pkg:pypi/nvflare@2.0.8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28230?format=api",
            "purl": "pkg:pypi/nvflare@2.0.9",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.9"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28231?format=api",
            "purl": "pkg:pypi/nvflare@2.0.10",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.10"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28232?format=api",
            "purl": "pkg:pypi/nvflare@2.0.11",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.11"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28233?format=api",
            "purl": "pkg:pypi/nvflare@2.0.12",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.12"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28234?format=api",
            "purl": "pkg:pypi/nvflare@2.0.13",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.13"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28235?format=api",
            "purl": "pkg:pypi/nvflare@2.0.14",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.14"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28236?format=api",
            "purl": "pkg:pypi/nvflare@2.0.15",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.15"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28237?format=api",
            "purl": "pkg:pypi/nvflare@2.0.16",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.16"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28238?format=api",
            "purl": "pkg:pypi/nvflare@2.0.18",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.18"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28239?format=api",
            "purl": "pkg:pypi/nvflare@2.0.19",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.0.19"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28240?format=api",
            "purl": "pkg:pypi/nvflare@2.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/28241?format=api",
            "purl": "pkg:pypi/nvflare@2.1.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ckay-6d62-ekb6"
                },
                {
                    "vulnerability": "VCID-hent-veuq-mfga"
                },
                {
                    "vulnerability": "VCID-hqup-r5bc-z3gk"
                },
                {
                    "vulnerability": "VCID-wps3-9req-s7bt"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nvflare@2.1.1"
        }
    ],
    "references": [
        {
            "reference_url": "https://github.com/NVIDIA/NVFlare/security/advisories/GHSA-hrf3-622q-8366",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/NVIDIA/NVFlare/security/advisories/GHSA-hrf3-622q-8366"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": null,
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ckay-6d62-ekb6"
}