Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/5892?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5892?format=api",
    "vulnerability_id": "VCID-z98u-6g16-nug8",
    "summary": "information disclosure",
    "aliases": [
        {
            "alias": "CVE-2020-13396"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/2662?format=api",
            "purl": "pkg:alpm/archlinux/freerdp@2:2.1.1-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-7j6q-nnsy-j7f2"
                },
                {
                    "vulnerability": "VCID-cdwt-t2cr-juhm"
                },
                {
                    "vulnerability": "VCID-cx1q-mj6d-5ub3"
                },
                {
                    "vulnerability": "VCID-gwn6-19pu-gkaf"
                },
                {
                    "vulnerability": "VCID-h9h3-mdj8-4qgf"
                },
                {
                    "vulnerability": "VCID-mpwy-vdxu-r3a1"
                },
                {
                    "vulnerability": "VCID-phtj-g4pp-9yg7"
                },
                {
                    "vulnerability": "VCID-q5qg-ukv8-1fdx"
                },
                {
                    "vulnerability": "VCID-tfw3-nver-rkbu"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/freerdp@2:2.1.1-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/95684?format=api",
            "purl": "pkg:deb/debian/freerdp2@2.1.1%2Bdfsg1-1?distro=bullseye",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/freerdp2@2.1.1%252Bdfsg1-1%3Fdistro=bullseye"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5709?format=api",
            "purl": "pkg:deb/debian/freerdp2@2.3.0%2Bdfsg1-2%2Bdeb11u1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/freerdp2@2.3.0%252Bdfsg1-2%252Bdeb11u1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/95678?format=api",
            "purl": "pkg:deb/debian/freerdp2@2.3.0%2Bdfsg1-2%2Bdeb11u1?distro=bullseye",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-a1hx-9apj-mqcz"
                },
                {
                    "vulnerability": "VCID-v4fz-m58u-xucp"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/freerdp2@2.3.0%252Bdfsg1-2%252Bdeb11u1%3Fdistro=bullseye"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/95675?format=api",
            "purl": "pkg:deb/debian/freerdp2@2.11.7%2Bdfsg1-6~deb12u1?distro=bullseye",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/freerdp2@2.11.7%252Bdfsg1-6~deb12u1%3Fdistro=bullseye"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/2685?format=api",
            "purl": "pkg:alpm/archlinux/freerdp@2:2.1.0-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-7epg-peax-uyd7"
                },
                {
                    "vulnerability": "VCID-dpv2-p8wy-uygm"
                },
                {
                    "vulnerability": "VCID-z98u-6g16-nug8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/freerdp@2:2.1.0-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5708?format=api",
            "purl": "pkg:deb/debian/freerdp2@2.0.0~git20190204.1.2693389a%2Bdfsg1-1%2Bdeb10u2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2e9w-v8n3-jyf5"
                },
                {
                    "vulnerability": "VCID-46ek-8asn-m3d2"
                },
                {
                    "vulnerability": "VCID-4jgw-zd4u-u3d9"
                },
                {
                    "vulnerability": "VCID-7epg-peax-uyd7"
                },
                {
                    "vulnerability": "VCID-7j6q-nnsy-j7f2"
                },
                {
                    "vulnerability": "VCID-7x3d-zetg-vfc2"
                },
                {
                    "vulnerability": "VCID-7zst-7f2w-c7hs"
                },
                {
                    "vulnerability": "VCID-8duw-s2b7-gkef"
                },
                {
                    "vulnerability": "VCID-cdwt-t2cr-juhm"
                },
                {
                    "vulnerability": "VCID-cx1q-mj6d-5ub3"
                },
                {
                    "vulnerability": "VCID-d81y-qg2d-dygu"
                },
                {
                    "vulnerability": "VCID-dpv2-p8wy-uygm"
                },
                {
                    "vulnerability": "VCID-f5fr-be4t-dubn"
                },
                {
                    "vulnerability": "VCID-g1b8-8t7n-kqe4"
                },
                {
                    "vulnerability": "VCID-gwn6-19pu-gkaf"
                },
                {
                    "vulnerability": "VCID-h9h3-mdj8-4qgf"
                },
                {
                    "vulnerability": "VCID-mpwy-vdxu-r3a1"
                },
                {
                    "vulnerability": "VCID-phtj-g4pp-9yg7"
                },
                {
                    "vulnerability": "VCID-pt74-x3fg-sbb1"
                },
                {
                    "vulnerability": "VCID-q5qg-ukv8-1fdx"
                },
                {
                    "vulnerability": "VCID-qf1u-wz1x-yuae"
                },
                {
                    "vulnerability": "VCID-tfw3-nver-rkbu"
                },
                {
                    "vulnerability": "VCID-vevu-z5a2-r7ds"
                },
                {
                    "vulnerability": "VCID-wtqz-4v4n-vqg7"
                },
                {
                    "vulnerability": "VCID-z98u-6g16-nug8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/freerdp2@2.0.0~git20190204.1.2693389a%252Bdfsg1-1%252Bdeb10u2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/140712?format=api",
            "purl": "pkg:rpm/redhat/freerdp@2.1.1-2?arch=el7",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1gwh-tf7f-w3hy"
                },
                {
                    "vulnerability": "VCID-2e9w-v8n3-jyf5"
                },
                {
                    "vulnerability": "VCID-46ek-8asn-m3d2"
                },
                {
                    "vulnerability": "VCID-55es-ndys-n3hf"
                },
                {
                    "vulnerability": "VCID-5de2-zyex-a7gf"
                },
                {
                    "vulnerability": "VCID-6b12-87fw-1yds"
                },
                {
                    "vulnerability": "VCID-76b1-m6wd-kqge"
                },
                {
                    "vulnerability": "VCID-7epg-peax-uyd7"
                },
                {
                    "vulnerability": "VCID-7x3d-zetg-vfc2"
                },
                {
                    "vulnerability": "VCID-8duw-s2b7-gkef"
                },
                {
                    "vulnerability": "VCID-d81y-qg2d-dygu"
                },
                {
                    "vulnerability": "VCID-f5fr-be4t-dubn"
                },
                {
                    "vulnerability": "VCID-fr1t-4kys-6ba4"
                },
                {
                    "vulnerability": "VCID-g1b8-8t7n-kqe4"
                },
                {
                    "vulnerability": "VCID-k234-1v1r-nyg4"
                },
                {
                    "vulnerability": "VCID-muyr-k46x-dyhm"
                },
                {
                    "vulnerability": "VCID-nhfs-8gpp-k7ah"
                },
                {
                    "vulnerability": "VCID-pt74-x3fg-sbb1"
                },
                {
                    "vulnerability": "VCID-qf1u-wz1x-yuae"
                },
                {
                    "vulnerability": "VCID-qgr7-xf5y-9ueg"
                },
                {
                    "vulnerability": "VCID-u6w5-m9ra-4kg2"
                },
                {
                    "vulnerability": "VCID-vevu-z5a2-r7ds"
                },
                {
                    "vulnerability": "VCID-vjyr-4av5-q3f4"
                },
                {
                    "vulnerability": "VCID-vzv1-6s2s-zqcr"
                },
                {
                    "vulnerability": "VCID-z98u-6g16-nug8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/freerdp@2.1.1-2%3Farch=el7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/140711?format=api",
            "purl": "pkg:rpm/redhat/freerdp@2:2.1.1-1?arch=el8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1gwh-tf7f-w3hy"
                },
                {
                    "vulnerability": "VCID-2e9w-v8n3-jyf5"
                },
                {
                    "vulnerability": "VCID-46ek-8asn-m3d2"
                },
                {
                    "vulnerability": "VCID-55es-ndys-n3hf"
                },
                {
                    "vulnerability": "VCID-5de2-zyex-a7gf"
                },
                {
                    "vulnerability": "VCID-6b12-87fw-1yds"
                },
                {
                    "vulnerability": "VCID-76b1-m6wd-kqge"
                },
                {
                    "vulnerability": "VCID-7epg-peax-uyd7"
                },
                {
                    "vulnerability": "VCID-7x3d-zetg-vfc2"
                },
                {
                    "vulnerability": "VCID-8duw-s2b7-gkef"
                },
                {
                    "vulnerability": "VCID-d81y-qg2d-dygu"
                },
                {
                    "vulnerability": "VCID-f5fr-be4t-dubn"
                },
                {
                    "vulnerability": "VCID-fr1t-4kys-6ba4"
                },
                {
                    "vulnerability": "VCID-g1b8-8t7n-kqe4"
                },
                {
                    "vulnerability": "VCID-k234-1v1r-nyg4"
                },
                {
                    "vulnerability": "VCID-muyr-k46x-dyhm"
                },
                {
                    "vulnerability": "VCID-nhfs-8gpp-k7ah"
                },
                {
                    "vulnerability": "VCID-pt74-x3fg-sbb1"
                },
                {
                    "vulnerability": "VCID-qf1u-wz1x-yuae"
                },
                {
                    "vulnerability": "VCID-qgr7-xf5y-9ueg"
                },
                {
                    "vulnerability": "VCID-u6w5-m9ra-4kg2"
                },
                {
                    "vulnerability": "VCID-vevu-z5a2-r7ds"
                },
                {
                    "vulnerability": "VCID-vjyr-4av5-q3f4"
                },
                {
                    "vulnerability": "VCID-vzv1-6s2s-zqcr"
                },
                {
                    "vulnerability": "VCID-z98u-6g16-nug8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/freerdp@2:2.1.1-1%3Farch=el8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/140713?format=api",
            "purl": "pkg:rpm/redhat/vinagre@3.22.0-23?arch=el8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1gwh-tf7f-w3hy"
                },
                {
                    "vulnerability": "VCID-2e9w-v8n3-jyf5"
                },
                {
                    "vulnerability": "VCID-46ek-8asn-m3d2"
                },
                {
                    "vulnerability": "VCID-55es-ndys-n3hf"
                },
                {
                    "vulnerability": "VCID-5de2-zyex-a7gf"
                },
                {
                    "vulnerability": "VCID-6b12-87fw-1yds"
                },
                {
                    "vulnerability": "VCID-76b1-m6wd-kqge"
                },
                {
                    "vulnerability": "VCID-7epg-peax-uyd7"
                },
                {
                    "vulnerability": "VCID-7x3d-zetg-vfc2"
                },
                {
                    "vulnerability": "VCID-8duw-s2b7-gkef"
                },
                {
                    "vulnerability": "VCID-d81y-qg2d-dygu"
                },
                {
                    "vulnerability": "VCID-f5fr-be4t-dubn"
                },
                {
                    "vulnerability": "VCID-fr1t-4kys-6ba4"
                },
                {
                    "vulnerability": "VCID-g1b8-8t7n-kqe4"
                },
                {
                    "vulnerability": "VCID-k234-1v1r-nyg4"
                },
                {
                    "vulnerability": "VCID-muyr-k46x-dyhm"
                },
                {
                    "vulnerability": "VCID-nhfs-8gpp-k7ah"
                },
                {
                    "vulnerability": "VCID-pt74-x3fg-sbb1"
                },
                {
                    "vulnerability": "VCID-qf1u-wz1x-yuae"
                },
                {
                    "vulnerability": "VCID-qgr7-xf5y-9ueg"
                },
                {
                    "vulnerability": "VCID-u6w5-m9ra-4kg2"
                },
                {
                    "vulnerability": "VCID-vevu-z5a2-r7ds"
                },
                {
                    "vulnerability": "VCID-vjyr-4av5-q3f4"
                },
                {
                    "vulnerability": "VCID-vzv1-6s2s-zqcr"
                },
                {
                    "vulnerability": "VCID-z98u-6g16-nug8"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/vinagre@3.22.0-23%3Farch=el8"
        }
    ],
    "references": [
        {
            "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13396.json",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.1",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L"
                }
            ],
            "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13396.json"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-13396",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00501",
                    "scoring_system": "epss",
                    "scoring_elements": "0.66354",
                    "published_at": "2026-06-04T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-13396"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13396",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13396"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1841189",
            "reference_id": "1841189",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1841189"
        },
        {
            "reference_url": "https://security.archlinux.org/ASA-202005-16",
            "reference_id": "ASA-202005-16",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-202005-16"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-1172",
            "reference_id": "AVG-1172",
            "reference_type": "",
            "scores": [
                {
                    "value": "High",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-1172"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2020:4031",
            "reference_id": "RHSA-2020:4031",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2020:4031"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2020:4647",
            "reference_id": "RHSA-2020:4647",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2020:4647"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 125,
            "name": "Out-of-bounds Read",
            "description": "The product reads data past the end, or before the beginning, of the intended buffer."
        }
    ],
    "exploits": [],
    "severity_range_score": "7.0 - 8.9",
    "exploitability": "0.5",
    "weighted_severity": "8.0",
    "risk_score": 4.0,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z98u-6g16-nug8"
}