Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/40407?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40407?format=api", "vulnerability_id": "VCID-ufw5-emg4-cqd6", "summary": "EZSA-2018-006 XSS vulnerability in 'disabled module' error template", "aliases": [ { "alias": "GMS-2018-66" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56949?format=api", "purl": "pkg:composer/ezsystems/ezpublish-legacy@2017.12.4%2B2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@2017.12.4%252B2" }, { "url": "http://public2.vulnerablecode.io/api/packages/56950?format=api", "purl": "pkg:composer/ezsystems/ezpublish-legacy@2018.6.1%2B4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@2018.6.1%252B4" }, { "url": "http://public2.vulnerablecode.io/api/packages/56951?format=api", "purl": "pkg:composer/ezsystems/ezpublish-legacy@2019.3.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@2019.3.0" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56947?format=api", "purl": "pkg:composer/ezsystems/ezpublish-legacy@5.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eaqz-xw6f-6yeb" }, { "vulnerability": "VCID-ufw5-emg4-cqd6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@5.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/56948?format=api", "purl": "pkg:composer/ezsystems/ezpublish-legacy@5.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eaqz-xw6f-6yeb" }, { "vulnerability": "VCID-ufw5-emg4-cqd6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@5.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/54064?format=api", "purl": "pkg:composer/ezsystems/ezpublish-legacy@2011.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1q2y-ruwv-rqgr" }, { "vulnerability": "VCID-2975-xhf4-ckcj" }, { "vulnerability": "VCID-bmkb-zcyd-6kdk" }, { "vulnerability": "VCID-eaqz-xw6f-6yeb" }, { "vulnerability": "VCID-ufw5-emg4-cqd6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@2011.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/56942?format=api", "purl": "pkg:composer/ezsystems/ezpublish-legacy@2018.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2975-xhf4-ckcj" }, { "vulnerability": "VCID-29ju-364n-qkch" }, { "vulnerability": "VCID-eaqz-xw6f-6yeb" }, { "vulnerability": "VCID-ufw5-emg4-cqd6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@2018.6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/56943?format=api", "purl": "pkg:composer/ezsystems/ezpublish-legacy@2018.9.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2975-xhf4-ckcj" }, { "vulnerability": "VCID-eaqz-xw6f-6yeb" }, { "vulnerability": "VCID-ufw5-emg4-cqd6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@2018.9.0" } ], "references": [ { "reference_url": "http://share.ez.no/community-project/security-advisories/ezsa-2018-006-xss-vulnerability-in-disabled-module-error-template", "reference_id": "", "reference_type": "", "scores": [], "url": "http://share.ez.no/community-project/security-advisories/ezsa-2018-006-xss-vulnerability-in-disabled-module-error-template" } ], "weaknesses": [], "exploits": [], "severity_range_score": null, "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ufw5-emg4-cqd6" }