Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/5501?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5501?format=api",
    "vulnerability_id": "VCID-v5ku-1gf2-bycq",
    "summary": "arbitrary code execution",
    "aliases": [
        {
            "alias": "CVE-2020-10188"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/2392?format=api",
            "purl": "pkg:alpm/archlinux/inetutils@2.0-1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/inetutils@2.0-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/99452?format=api",
            "purl": "pkg:deb/debian/inetutils@2:1.9.4-12?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:1.9.4-12%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5890?format=api",
            "purl": "pkg:deb/debian/inetutils@2:2.0-1%2Bdeb11u2",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:2.0-1%252Bdeb11u2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/99444?format=api",
            "purl": "pkg:deb/debian/inetutils@2:2.0-1%2Bdeb11u2?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:2.0-1%252Bdeb11u2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/99442?format=api",
            "purl": "pkg:deb/debian/inetutils@2:2.4-2%2Bdeb12u3?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:2.4-2%252Bdeb12u3%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/99446?format=api",
            "purl": "pkg:deb/debian/inetutils@2:2.6-3%2Bdeb13u3?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:2.6-3%252Bdeb13u3%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/99445?format=api",
            "purl": "pkg:deb/debian/inetutils@2:2.8-2?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:2.8-2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/117892?format=api",
            "purl": "pkg:deb/debian/netkit-telnet@0.17-18woody2?distro=bullseye",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/netkit-telnet@0.17-18woody2%3Fdistro=bullseye"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/6311?format=api",
            "purl": "pkg:deb/debian/netkit-telnet@0.17-18woody3",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/netkit-telnet@0.17-18woody3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/117887?format=api",
            "purl": "pkg:deb/debian/netkit-telnet@0.17-42?distro=bullseye",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/netkit-telnet@0.17-42%3Fdistro=bullseye"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/117907?format=api",
            "purl": "pkg:deb/debian/netkit-telnet-ssl@0.17.17%2B0.1-2woody3?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/netkit-telnet-ssl@0.17.17%252B0.1-2woody3%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/117896?format=api",
            "purl": "pkg:deb/debian/netkit-telnet-ssl@0.17.41%2B0.2-3.3?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/netkit-telnet-ssl@0.17.41%252B0.2-3.3%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/117893?format=api",
            "purl": "pkg:deb/debian/netkit-telnet-ssl@0.17.41%2Breally0.17-3?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/netkit-telnet-ssl@0.17.41%252Breally0.17-3%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/117898?format=api",
            "purl": "pkg:deb/debian/netkit-telnet-ssl@0.17.41%2Breally0.17-6?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/netkit-telnet-ssl@0.17.41%252Breally0.17-6%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/117897?format=api",
            "purl": "pkg:deb/debian/netkit-telnet-ssl@0.17.41%2Breally0.17-7?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/netkit-telnet-ssl@0.17.41%252Breally0.17-7%3Fdistro=trixie"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/2391?format=api",
            "purl": "pkg:alpm/archlinux/inetutils@1.9.4-9",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sdae-zzg1-r3cq"
                },
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/inetutils@1.9.4-9"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5882?format=api",
            "purl": "pkg:deb/debian/inetutils@2:1.4.2%2B20040207-4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sdae-zzg1-r3cq"
                },
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:1.4.2%252B20040207-4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5883?format=api",
            "purl": "pkg:deb/debian/inetutils@2:1.5.dfsg.1-2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sdae-zzg1-r3cq"
                },
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:1.5.dfsg.1-2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5884?format=api",
            "purl": "pkg:deb/debian/inetutils@2:1.5.dfsg.1-9%2Blenny1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sdae-zzg1-r3cq"
                },
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:1.5.dfsg.1-9%252Blenny1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5885?format=api",
            "purl": "pkg:deb/debian/inetutils@2:1.6-3.1%2Bsqueeze2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sdae-zzg1-r3cq"
                },
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:1.6-3.1%252Bsqueeze2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5886?format=api",
            "purl": "pkg:deb/debian/inetutils@2:1.9-2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sdae-zzg1-r3cq"
                },
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:1.9-2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5887?format=api",
            "purl": "pkg:deb/debian/inetutils@2:1.9.2.39.3a460-3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sdae-zzg1-r3cq"
                },
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:1.9.2.39.3a460-3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5888?format=api",
            "purl": "pkg:deb/debian/inetutils@2:1.9.4-2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sdae-zzg1-r3cq"
                },
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:1.9.4-2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5889?format=api",
            "purl": "pkg:deb/debian/inetutils@2:1.9.4-7%2Bdeb10u1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sdae-zzg1-r3cq"
                },
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/inetutils@2:1.9.4-7%252Bdeb10u1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/6309?format=api",
            "purl": "pkg:deb/debian/netkit-telnet@0.12-4slink.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/netkit-telnet@0.12-4slink.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/6310?format=api",
            "purl": "pkg:deb/debian/netkit-telnet@0.16-4potato.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/netkit-telnet@0.16-4potato.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/141820?format=api",
            "purl": "pkg:rpm/redhat/krb5-appl@1.0.1-10?arch=el6_10",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/krb5-appl@1.0.1-10%3Farch=el6_10"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/141823?format=api",
            "purl": "pkg:rpm/redhat/telnet@1:0.17-49?arch=el6_10",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/telnet@1:0.17-49%3Farch=el6_10"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/141824?format=api",
            "purl": "pkg:rpm/redhat/telnet@1:0.17-65?arch=el7_8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/telnet@1:0.17-65%3Farch=el7_8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/141825?format=api",
            "purl": "pkg:rpm/redhat/telnet@1:0.17-65?arch=el7_7",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/telnet@1:0.17-65%3Farch=el7_7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/141826?format=api",
            "purl": "pkg:rpm/redhat/telnet@1:0.17-65?arch=el7_6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/telnet@1:0.17-65%3Farch=el7_6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/141822?format=api",
            "purl": "pkg:rpm/redhat/telnet@1:0.17-73.el8_0?arch=1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/telnet@1:0.17-73.el8_0%3Farch=1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/141821?format=api",
            "purl": "pkg:rpm/redhat/telnet@1:0.17-73.el8_1?arch=1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-v5ku-1gf2-bycq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/telnet@1:0.17-73.el8_1%3Farch=1"
        }
    ],
    "references": [
        {
            "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10188.json",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                }
            ],
            "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10188.json"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-10188",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.08404",
                    "scoring_system": "epss",
                    "scoring_elements": "0.92469",
                    "published_at": "2026-06-04T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-10188"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10188",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10188"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673",
            "reference_id": "1811673",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
        },
        {
            "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953477",
            "reference_id": "953477",
            "reference_type": "",
            "scores": [],
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953477"
        },
        {
            "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953478",
            "reference_id": "953478",
            "reference_type": "",
            "scores": [],
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953478"
        },
        {
            "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=956084",
            "reference_id": "956084",
            "reference_type": "",
            "scores": [],
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=956084"
        },
        {
            "reference_url": "https://security.archlinux.org/ASA-202106-20",
            "reference_id": "ASA-202106-20",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-202106-20"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-1003",
            "reference_id": "AVG-1003",
            "reference_type": "",
            "scores": [
                {
                    "value": "High",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-1003"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2020:1318",
            "reference_id": "RHSA-2020:1318",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2020:1318"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2020:1334",
            "reference_id": "RHSA-2020:1334",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2020:1334"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2020:1335",
            "reference_id": "RHSA-2020:1335",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2020:1335"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2020:1342",
            "reference_id": "RHSA-2020:1342",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2020:1342"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2020:1349",
            "reference_id": "RHSA-2020:1349",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2020:1349"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2022:0011",
            "reference_id": "RHSA-2022:0011",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2022:0011"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2022:0158",
            "reference_id": "RHSA-2022:0158",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2022:0158"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 119,
            "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
            "description": "The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer."
        }
    ],
    "exploits": [],
    "severity_range_score": "7.0 - 9.8",
    "exploitability": "0.5",
    "weighted_severity": "8.8",
    "risk_score": 4.4,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v5ku-1gf2-bycq"
}