GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/36902?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36902?format=api",
    "vulnerability_id": "VCID-x1xn-udmm-4kh8",
    "summary": "OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and escalate permissions when root later runs the daemon. Version 0.9.4 contains a fix for the issue.",
    "aliases": [
        {
            "alias": "CVE-2024-48911"
        },
        {
            "alias": "GHSA-pf5v-pqfv-x8jj"
        },
        {
            "alias": "PYSEC-2024-248"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43719?format=api",
            "purl": "pkg:pypi/opencanary@0.9.4",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.9.4"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43697?format=api",
            "purl": "pkg:pypi/opencanary@0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43698?format=api",
            "purl": "pkg:pypi/opencanary@0.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43699?format=api",
            "purl": "pkg:pypi/opencanary@0.3.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.3.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43700?format=api",
            "purl": "pkg:pypi/opencanary@0.3.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.3.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43701?format=api",
            "purl": "pkg:pypi/opencanary@0.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43702?format=api",
            "purl": "pkg:pypi/opencanary@0.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43703?format=api",
            "purl": "pkg:pypi/opencanary@0.5.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.5.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43704?format=api",
            "purl": "pkg:pypi/opencanary@0.5.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.5.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43705?format=api",
            "purl": "pkg:pypi/opencanary@0.5.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.5.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43706?format=api",
            "purl": "pkg:pypi/opencanary@0.5.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.5.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43707?format=api",
            "purl": "pkg:pypi/opencanary@0.5.6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.5.6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43708?format=api",
            "purl": "pkg:pypi/opencanary@0.5.7",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.5.7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43709?format=api",
            "purl": "pkg:pypi/opencanary@0.5.8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.5.8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43710?format=api",
            "purl": "pkg:pypi/opencanary@0.6.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.6.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43711?format=api",
            "purl": "pkg:pypi/opencanary@0.6.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.6.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43712?format=api",
            "purl": "pkg:pypi/opencanary@0.6.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.6.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43713?format=api",
            "purl": "pkg:pypi/opencanary@0.6.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.6.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43714?format=api",
            "purl": "pkg:pypi/opencanary@0.7.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.7.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43715?format=api",
            "purl": "pkg:pypi/opencanary@0.9.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.9.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43716?format=api",
            "purl": "pkg:pypi/opencanary@0.9.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.9.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43717?format=api",
            "purl": "pkg:pypi/opencanary@0.9.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.9.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/43718?format=api",
            "purl": "pkg:pypi/opencanary@0.9.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-x1xn-udmm-4kh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/opencanary@0.9.3"
        }
    ],
    "references": [
        {
            "reference_url": "https://github.com/thinkst/opencanary/commit/2c11575b1a3dd8b0df26a879ba856c0aa350c049",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
                }
            ],
            "url": "https://github.com/thinkst/opencanary/commit/2c11575b1a3dd8b0df26a879ba856c0aa350c049"
        },
        {
            "reference_url": "https://github.com/thinkst/opencanary/releases/tag/v0.9.4",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
                }
            ],
            "url": "https://github.com/thinkst/opencanary/releases/tag/v0.9.4"
        },
        {
            "reference_url": "https://github.com/thinkst/opencanary/security/advisories/GHSA-pf5v-pqfv-x8jj",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
                }
            ],
            "url": "https://github.com/thinkst/opencanary/security/advisories/GHSA-pf5v-pqfv-x8jj"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "7.8 - 7.8",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x1xn-udmm-4kh8"
}