Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42546?format=api",
    "vulnerability_id": "VCID-4yce-5hbd-4kbx",
    "summary": "Cookie-setting is not restricted based on the public suffix list\nResponses from domain names whose public domain name suffix contains 1 or more periods (e.g. responses from `example.co.uk`, given its public domain name suffix is `co.uk`) are able to set cookies that are included in requests to any other domain sharing the same domain name suffix.",
    "aliases": [
        {
            "alias": "GHSA-mfjm-vh54-3f96"
        },
        {
            "alias": "GMS-2022-230"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/26825?format=api",
            "purl": "pkg:pypi/scrapy@1.8.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-atnw-pnvj-zkhp"
                },
                {
                    "vulnerability": "VCID-jrh5-kjau-xkar"
                },
                {
                    "vulnerability": "VCID-n6z2-awrh-7kbg"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/scrapy@1.8.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/26826?format=api",
            "purl": "pkg:pypi/scrapy@2.6.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-atnw-pnvj-zkhp"
                },
                {
                    "vulnerability": "VCID-jrh5-kjau-xkar"
                },
                {
                    "vulnerability": "VCID-n6z2-awrh-7kbg"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/scrapy@2.6.0"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/24022?format=api",
            "purl": "pkg:pypi/scrapy@2.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4q2x-51p4-eygm"
                },
                {
                    "vulnerability": "VCID-4yce-5hbd-4kbx"
                },
                {
                    "vulnerability": "VCID-atnw-pnvj-zkhp"
                },
                {
                    "vulnerability": "VCID-eps3-2rkz-r3gf"
                },
                {
                    "vulnerability": "VCID-jrh5-kjau-xkar"
                },
                {
                    "vulnerability": "VCID-n6z2-awrh-7kbg"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/scrapy@2.0.0"
        }
    ],
    "references": [
        {
            "reference_url": "https://github.com/scrapy/scrapy/commit/e865c4430e58a4faa0e0766b23830f8423d6167a",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/scrapy/scrapy/commit/e865c4430e58a4faa0e0766b23830f8423d6167a"
        },
        {
            "reference_url": "https://github.com/advisories/GHSA-mfjm-vh54-3f96",
            "reference_id": "GHSA-mfjm-vh54-3f96",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/advisories/GHSA-mfjm-vh54-3f96"
        },
        {
            "reference_url": "https://github.com/scrapy/scrapy/security/advisories/GHSA-mfjm-vh54-3f96",
            "reference_id": "GHSA-mfjm-vh54-3f96",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/scrapy/scrapy/security/advisories/GHSA-mfjm-vh54-3f96"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 1035,
            "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."
        },
        {
            "cwe_id": 937,
            "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."
        }
    ],
    "exploits": [],
    "severity_range_score": null,
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4yce-5hbd-4kbx"
}