GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/4719?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/4719?format=api",
    "vulnerability_id": "VCID-w79s-bv7d-s7hf",
    "summary": "multiple issues",
    "aliases": [
        {
            "alias": "CVE-2016-9448"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1929?format=api",
            "purl": "pkg:alpm/archlinux/lib32-libtiff@4.0.7-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-19y7-v51n-pfa5"
                },
                {
                    "vulnerability": "VCID-wbmf-tw8n-1ucj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/lib32-libtiff@4.0.7-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1933?format=api",
            "purl": "pkg:alpm/archlinux/libtiff@4.0.7-1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/libtiff@4.0.7-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/132115?format=api",
            "purl": "pkg:deb/debian/tiff@0?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@0%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/132045?format=api",
            "purl": "pkg:deb/debian/tiff@4.2.0-1%2Bdeb11u5?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5qdp-vzrd-uqgc"
                },
                {
                    "vulnerability": "VCID-5zvp-ysut-juep"
                },
                {
                    "vulnerability": "VCID-6hf4-rc1a-pbg6"
                },
                {
                    "vulnerability": "VCID-6v96-k8cs-13f7"
                },
                {
                    "vulnerability": "VCID-92dt-g6m8-fufk"
                },
                {
                    "vulnerability": "VCID-anfx-xj8v-kfg8"
                },
                {
                    "vulnerability": "VCID-c7nt-5d64-kkev"
                },
                {
                    "vulnerability": "VCID-d52s-g5c7-qka3"
                },
                {
                    "vulnerability": "VCID-fbks-9s7e-wfcj"
                },
                {
                    "vulnerability": "VCID-gyvd-4m8g-jkdu"
                },
                {
                    "vulnerability": "VCID-hhgz-j76b-k7d4"
                },
                {
                    "vulnerability": "VCID-kxdc-8rht-vfdy"
                },
                {
                    "vulnerability": "VCID-n3p5-9ykg-sufd"
                },
                {
                    "vulnerability": "VCID-nwgs-pqj7-xkbs"
                },
                {
                    "vulnerability": "VCID-su9v-ewt3-6ua8"
                },
                {
                    "vulnerability": "VCID-xg35-8jbc-wqa4"
                },
                {
                    "vulnerability": "VCID-xms6-c2j7-hfh8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@4.2.0-1%252Bdeb11u5%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/132043?format=api",
            "purl": "pkg:deb/debian/tiff@4.5.0-6%2Bdeb12u4?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5qdp-vzrd-uqgc"
                },
                {
                    "vulnerability": "VCID-5zvp-ysut-juep"
                },
                {
                    "vulnerability": "VCID-6hf4-rc1a-pbg6"
                },
                {
                    "vulnerability": "VCID-6v96-k8cs-13f7"
                },
                {
                    "vulnerability": "VCID-92dt-g6m8-fufk"
                },
                {
                    "vulnerability": "VCID-c7nt-5d64-kkev"
                },
                {
                    "vulnerability": "VCID-cpk7-uyvf-3kb6"
                },
                {
                    "vulnerability": "VCID-d52s-g5c7-qka3"
                },
                {
                    "vulnerability": "VCID-fbks-9s7e-wfcj"
                },
                {
                    "vulnerability": "VCID-gyvd-4m8g-jkdu"
                },
                {
                    "vulnerability": "VCID-kxdc-8rht-vfdy"
                },
                {
                    "vulnerability": "VCID-n3p5-9ykg-sufd"
                },
                {
                    "vulnerability": "VCID-nwgs-pqj7-xkbs"
                },
                {
                    "vulnerability": "VCID-su9v-ewt3-6ua8"
                },
                {
                    "vulnerability": "VCID-xg35-8jbc-wqa4"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@4.5.0-6%252Bdeb12u4%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/132047?format=api",
            "purl": "pkg:deb/debian/tiff@4.7.0-3%2Bdeb13u2?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5qdp-vzrd-uqgc"
                },
                {
                    "vulnerability": "VCID-6hf4-rc1a-pbg6"
                },
                {
                    "vulnerability": "VCID-92dt-g6m8-fufk"
                },
                {
                    "vulnerability": "VCID-fbks-9s7e-wfcj"
                },
                {
                    "vulnerability": "VCID-n3p5-9ykg-sufd"
                },
                {
                    "vulnerability": "VCID-su9v-ewt3-6ua8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@4.7.0-3%252Bdeb13u2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/132046?format=api",
            "purl": "pkg:deb/debian/tiff@4.7.1-2?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@4.7.1-2%3Fdistro=trixie"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1931?format=api",
            "purl": "pkg:alpm/archlinux/lib32-libtiff@4.0.6-2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-13fq-85pm-9ucx"
                },
                {
                    "vulnerability": "VCID-346w-g3br-qyfj"
                },
                {
                    "vulnerability": "VCID-4ejj-ywd7-yqdh"
                },
                {
                    "vulnerability": "VCID-4gq3-smes-y3ej"
                },
                {
                    "vulnerability": "VCID-5bpk-63mp-myea"
                },
                {
                    "vulnerability": "VCID-6f7j-jffy-g3h1"
                },
                {
                    "vulnerability": "VCID-6j88-9v6m-aqaa"
                },
                {
                    "vulnerability": "VCID-8t9a-wr15-s3gj"
                },
                {
                    "vulnerability": "VCID-ajjg-j3u3-87hb"
                },
                {
                    "vulnerability": "VCID-aqsc-pckt-8kb6"
                },
                {
                    "vulnerability": "VCID-bmhd-pxe4-5kg3"
                },
                {
                    "vulnerability": "VCID-d1v8-kg4j-ayek"
                },
                {
                    "vulnerability": "VCID-dbtw-xgms-g7a1"
                },
                {
                    "vulnerability": "VCID-dyvz-88n7-aug5"
                },
                {
                    "vulnerability": "VCID-eane-ev3e-93d3"
                },
                {
                    "vulnerability": "VCID-eaxr-tudk-jfff"
                },
                {
                    "vulnerability": "VCID-enmp-vfzt-ubdn"
                },
                {
                    "vulnerability": "VCID-evq9-mjww-1qdk"
                },
                {
                    "vulnerability": "VCID-eys7-uqtb-k3hf"
                },
                {
                    "vulnerability": "VCID-f79u-ccnn-fkb2"
                },
                {
                    "vulnerability": "VCID-gpud-pv1v-67c1"
                },
                {
                    "vulnerability": "VCID-gr1x-z5t8-j3eh"
                },
                {
                    "vulnerability": "VCID-h17a-js2a-x7dh"
                },
                {
                    "vulnerability": "VCID-h9nx-bv3h-dyev"
                },
                {
                    "vulnerability": "VCID-hep7-wa9u-ybbb"
                },
                {
                    "vulnerability": "VCID-j812-5e7u-77gj"
                },
                {
                    "vulnerability": "VCID-jpk4-8v2b-tkd3"
                },
                {
                    "vulnerability": "VCID-k5c9-5xnv-57f7"
                },
                {
                    "vulnerability": "VCID-kucf-4yqt-3fbg"
                },
                {
                    "vulnerability": "VCID-kvrv-n7c7-nuba"
                },
                {
                    "vulnerability": "VCID-ma1y-1jua-3bhz"
                },
                {
                    "vulnerability": "VCID-n1yd-y1ur-cqgx"
                },
                {
                    "vulnerability": "VCID-nubb-rk2q-z3de"
                },
                {
                    "vulnerability": "VCID-ph5n-1uzy-fffc"
                },
                {
                    "vulnerability": "VCID-png5-4eam-k7e2"
                },
                {
                    "vulnerability": "VCID-r6sa-34pz-cugr"
                },
                {
                    "vulnerability": "VCID-rarp-cytw-9yfq"
                },
                {
                    "vulnerability": "VCID-sccn-urtk-gbb6"
                },
                {
                    "vulnerability": "VCID-scuk-jnxs-sbfu"
                },
                {
                    "vulnerability": "VCID-tht3-q94h-yya1"
                },
                {
                    "vulnerability": "VCID-um8a-bvjq-abgy"
                },
                {
                    "vulnerability": "VCID-uscn-2nfg-mqay"
                },
                {
                    "vulnerability": "VCID-w79s-bv7d-s7hf"
                },
                {
                    "vulnerability": "VCID-z3mf-7y22-q7bz"
                },
                {
                    "vulnerability": "VCID-z677-7ega-8khj"
                },
                {
                    "vulnerability": "VCID-z6yx-cgpy-cqax"
                },
                {
                    "vulnerability": "VCID-zhm8-29qs-jufd"
                },
                {
                    "vulnerability": "VCID-znt9-r8xc-bbek"
                },
                {
                    "vulnerability": "VCID-zxv1-87z1-hkbr"
                },
                {
                    "vulnerability": "VCID-zzch-261b-3ua1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/lib32-libtiff@4.0.6-2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1932?format=api",
            "purl": "pkg:alpm/archlinux/libtiff@4.0.6-2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-13fq-85pm-9ucx"
                },
                {
                    "vulnerability": "VCID-346w-g3br-qyfj"
                },
                {
                    "vulnerability": "VCID-4ejj-ywd7-yqdh"
                },
                {
                    "vulnerability": "VCID-4gq3-smes-y3ej"
                },
                {
                    "vulnerability": "VCID-5bpk-63mp-myea"
                },
                {
                    "vulnerability": "VCID-6f7j-jffy-g3h1"
                },
                {
                    "vulnerability": "VCID-6j88-9v6m-aqaa"
                },
                {
                    "vulnerability": "VCID-8t9a-wr15-s3gj"
                },
                {
                    "vulnerability": "VCID-ajjg-j3u3-87hb"
                },
                {
                    "vulnerability": "VCID-aqsc-pckt-8kb6"
                },
                {
                    "vulnerability": "VCID-bmhd-pxe4-5kg3"
                },
                {
                    "vulnerability": "VCID-d1v8-kg4j-ayek"
                },
                {
                    "vulnerability": "VCID-dbtw-xgms-g7a1"
                },
                {
                    "vulnerability": "VCID-dyvz-88n7-aug5"
                },
                {
                    "vulnerability": "VCID-eane-ev3e-93d3"
                },
                {
                    "vulnerability": "VCID-eaxr-tudk-jfff"
                },
                {
                    "vulnerability": "VCID-enmp-vfzt-ubdn"
                },
                {
                    "vulnerability": "VCID-evq9-mjww-1qdk"
                },
                {
                    "vulnerability": "VCID-eys7-uqtb-k3hf"
                },
                {
                    "vulnerability": "VCID-f79u-ccnn-fkb2"
                },
                {
                    "vulnerability": "VCID-gpud-pv1v-67c1"
                },
                {
                    "vulnerability": "VCID-gr1x-z5t8-j3eh"
                },
                {
                    "vulnerability": "VCID-h17a-js2a-x7dh"
                },
                {
                    "vulnerability": "VCID-h9nx-bv3h-dyev"
                },
                {
                    "vulnerability": "VCID-hep7-wa9u-ybbb"
                },
                {
                    "vulnerability": "VCID-j812-5e7u-77gj"
                },
                {
                    "vulnerability": "VCID-jpk4-8v2b-tkd3"
                },
                {
                    "vulnerability": "VCID-k5c9-5xnv-57f7"
                },
                {
                    "vulnerability": "VCID-kucf-4yqt-3fbg"
                },
                {
                    "vulnerability": "VCID-kvrv-n7c7-nuba"
                },
                {
                    "vulnerability": "VCID-ma1y-1jua-3bhz"
                },
                {
                    "vulnerability": "VCID-n1yd-y1ur-cqgx"
                },
                {
                    "vulnerability": "VCID-nubb-rk2q-z3de"
                },
                {
                    "vulnerability": "VCID-ph5n-1uzy-fffc"
                },
                {
                    "vulnerability": "VCID-png5-4eam-k7e2"
                },
                {
                    "vulnerability": "VCID-r6sa-34pz-cugr"
                },
                {
                    "vulnerability": "VCID-rarp-cytw-9yfq"
                },
                {
                    "vulnerability": "VCID-sccn-urtk-gbb6"
                },
                {
                    "vulnerability": "VCID-scuk-jnxs-sbfu"
                },
                {
                    "vulnerability": "VCID-tht3-q94h-yya1"
                },
                {
                    "vulnerability": "VCID-um8a-bvjq-abgy"
                },
                {
                    "vulnerability": "VCID-uscn-2nfg-mqay"
                },
                {
                    "vulnerability": "VCID-w79s-bv7d-s7hf"
                },
                {
                    "vulnerability": "VCID-z3mf-7y22-q7bz"
                },
                {
                    "vulnerability": "VCID-z677-7ega-8khj"
                },
                {
                    "vulnerability": "VCID-z6yx-cgpy-cqax"
                },
                {
                    "vulnerability": "VCID-zhm8-29qs-jufd"
                },
                {
                    "vulnerability": "VCID-znt9-r8xc-bbek"
                },
                {
                    "vulnerability": "VCID-zxv1-87z1-hkbr"
                },
                {
                    "vulnerability": "VCID-zzch-261b-3ua1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/libtiff@4.0.6-2"
        }
    ],
    "references": [
        {
            "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9448.json",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "3.3",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
                }
            ],
            "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9448.json"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9448",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.03306",
                    "scoring_system": "epss",
                    "scoring_elements": "0.87464",
                    "published_at": "2026-06-04T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9448"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1397734",
            "reference_id": "1397734",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1397734"
        },
        {
            "reference_url": "https://security.archlinux.org/ASA-201611-26",
            "reference_id": "ASA-201611-26",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-201611-26"
        },
        {
            "reference_url": "https://security.archlinux.org/ASA-201611-27",
            "reference_id": "ASA-201611-27",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-201611-27"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-85",
            "reference_id": "AVG-85",
            "reference_type": "",
            "scores": [
                {
                    "value": "Critical",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-85"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-86",
            "reference_id": "AVG-86",
            "reference_type": "",
            "scores": [
                {
                    "value": "Critical",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-86"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 476,
            "name": "NULL Pointer Dereference",
            "description": "A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit."
        }
    ],
    "exploits": [],
    "severity_range_score": "3.3 - 10.0",
    "exploitability": "0.5",
    "weighted_severity": "9.0",
    "risk_score": 4.5,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w79s-bv7d-s7hf"
}