Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/6051?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6051?format=api",
    "vulnerability_id": "VCID-wa5u-9eym-17gu",
    "summary": "information disclosure",
    "aliases": [
        {
            "alias": "CVE-2019-11733"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/2046?format=api",
            "purl": "pkg:alpm/archlinux/firefox@68.0.2-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1qbv-mus6-8bfu"
                },
                {
                    "vulnerability": "VCID-21vu-mhqr-xkhj"
                },
                {
                    "vulnerability": "VCID-25je-3s51-ykbg"
                },
                {
                    "vulnerability": "VCID-32xq-p3m3-ekae"
                },
                {
                    "vulnerability": "VCID-4bj8-6qq3-5kaz"
                },
                {
                    "vulnerability": "VCID-5x7r-bvvq-zycx"
                },
                {
                    "vulnerability": "VCID-c3y2-th3k-aqdm"
                },
                {
                    "vulnerability": "VCID-dxev-qsx5-r7by"
                },
                {
                    "vulnerability": "VCID-e4xz-th1d-h3fj"
                },
                {
                    "vulnerability": "VCID-j86v-s5nf-rffh"
                },
                {
                    "vulnerability": "VCID-kapk-7bh6-fug6"
                },
                {
                    "vulnerability": "VCID-kfzt-kup3-q7a8"
                },
                {
                    "vulnerability": "VCID-nkz4-gyvm-3fg3"
                },
                {
                    "vulnerability": "VCID-nvwa-7ghu-aqbw"
                },
                {
                    "vulnerability": "VCID-pnam-h39y-63a3"
                },
                {
                    "vulnerability": "VCID-u3d4-tv6f-dygp"
                },
                {
                    "vulnerability": "VCID-x4t8-hdu2-37eb"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@68.0.2-1"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/3852?format=api",
            "purl": "pkg:alpm/archlinux/firefox@68.0.1-2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-wa5u-9eym-17gu"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@68.0.1-2"
        }
    ],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-11733",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.0039",
                    "scoring_system": "epss",
                    "scoring_elements": "0.60366",
                    "published_at": "2026-05-30T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-11733"
        },
        {
            "reference_url": "https://security.archlinux.org/ASA-201908-11",
            "reference_id": "ASA-201908-11",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-201908-11"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-1025",
            "reference_id": "AVG-1025",
            "reference_type": "",
            "scores": [
                {
                    "value": "Medium",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-1025"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "4.0 - 6.9",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wa5u-9eym-17gu"
}