Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/6589?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6589?format=api",
    "vulnerability_id": "VCID-pm1e-1y2c-qqea",
    "summary": "multiple issues",
    "aliases": [
        {
            "alias": "CVE-2017-0365"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/3335?format=api",
            "purl": "pkg:alpm/archlinux/mediawiki@1.28.1-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-wdva-tt5d-fkfp"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/mediawiki@1.28.1-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/116052?format=api",
            "purl": "pkg:deb/debian/mediawiki@1:1.27.2-1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.2-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4923?format=api",
            "purl": "pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-8g9q-btdb-uybs"
                },
                {
                    "vulnerability": "VCID-8v3n-gcv9-p7ft"
                },
                {
                    "vulnerability": "VCID-a1mq-jgwy-4bhs"
                },
                {
                    "vulnerability": "VCID-ajfs-yq8z-9ug4"
                },
                {
                    "vulnerability": "VCID-ajw1-97z6-q7gx"
                },
                {
                    "vulnerability": "VCID-bx8m-mdg4-vbdx"
                },
                {
                    "vulnerability": "VCID-hhgt-f8k5-jqbc"
                },
                {
                    "vulnerability": "VCID-r3b5-7t8m-rff6"
                },
                {
                    "vulnerability": "VCID-uvth-ajst-4udu"
                },
                {
                    "vulnerability": "VCID-xwsj-82z3-3kfk"
                },
                {
                    "vulnerability": "VCID-xxzh-tyxs-6ugj"
                },
                {
                    "vulnerability": "VCID-ypnm-uud2-wyey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/115992?format=api",
            "purl": "pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-6abq-6jq6-cfhg"
                },
                {
                    "vulnerability": "VCID-7btv-s4q8-muds"
                },
                {
                    "vulnerability": "VCID-cx2g-7k39-9kc6"
                },
                {
                    "vulnerability": "VCID-dnka-4jmd-uudb"
                },
                {
                    "vulnerability": "VCID-qpyg-4cts-z3gz"
                },
                {
                    "vulnerability": "VCID-zv3h-mucp-bkhr"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/115990?format=api",
            "purl": "pkg:deb/debian/mediawiki@1:1.39.17-1%2Bdeb12u2?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-cx2g-7k39-9kc6"
                },
                {
                    "vulnerability": "VCID-zv3h-mucp-bkhr"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1%252Bdeb12u2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/115994?format=api",
            "purl": "pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-1~deb13u1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-1~deb13u1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/115993?format=api",
            "purl": "pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-2?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-2%3Fdistro=trixie"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/3334?format=api",
            "purl": "pkg:alpm/archlinux/mediawiki@1.28.0-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-17xy-hr3x-bffr"
                },
                {
                    "vulnerability": "VCID-1tce-jdy8-yke5"
                },
                {
                    "vulnerability": "VCID-3ry6-3y3d-pqbz"
                },
                {
                    "vulnerability": "VCID-crjt-dux3-rbgw"
                },
                {
                    "vulnerability": "VCID-f51q-x4tn-z7dz"
                },
                {
                    "vulnerability": "VCID-fx7d-43ha-eqbb"
                },
                {
                    "vulnerability": "VCID-hgq5-7w26-pkcg"
                },
                {
                    "vulnerability": "VCID-pm1e-1y2c-qqea"
                },
                {
                    "vulnerability": "VCID-wucn-bbxt-27gk"
                },
                {
                    "vulnerability": "VCID-x2f1-6t18-xqgm"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/mediawiki@1.28.0-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4918?format=api",
            "purl": "pkg:deb/debian/mediawiki@1:1.7",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-17xy-hr3x-bffr"
                },
                {
                    "vulnerability": "VCID-1tce-jdy8-yke5"
                },
                {
                    "vulnerability": "VCID-3ry6-3y3d-pqbz"
                },
                {
                    "vulnerability": "VCID-7kcm-gvq9-5ydv"
                },
                {
                    "vulnerability": "VCID-8g9q-btdb-uybs"
                },
                {
                    "vulnerability": "VCID-8v3n-gcv9-p7ft"
                },
                {
                    "vulnerability": "VCID-9br2-t8bx-jude"
                },
                {
                    "vulnerability": "VCID-a1mq-jgwy-4bhs"
                },
                {
                    "vulnerability": "VCID-ajfs-yq8z-9ug4"
                },
                {
                    "vulnerability": "VCID-ajw1-97z6-q7gx"
                },
                {
                    "vulnerability": "VCID-bx8m-mdg4-vbdx"
                },
                {
                    "vulnerability": "VCID-cpuc-w8m7-nudw"
                },
                {
                    "vulnerability": "VCID-crjt-dux3-rbgw"
                },
                {
                    "vulnerability": "VCID-e8um-kuds-6bhc"
                },
                {
                    "vulnerability": "VCID-f51q-x4tn-z7dz"
                },
                {
                    "vulnerability": "VCID-fgkw-7jsk-tqdv"
                },
                {
                    "vulnerability": "VCID-fx7d-43ha-eqbb"
                },
                {
                    "vulnerability": "VCID-hgq5-7w26-pkcg"
                },
                {
                    "vulnerability": "VCID-hhgt-f8k5-jqbc"
                },
                {
                    "vulnerability": "VCID-nzgd-bwa8-7ugr"
                },
                {
                    "vulnerability": "VCID-pm1e-1y2c-qqea"
                },
                {
                    "vulnerability": "VCID-r3b5-7t8m-rff6"
                },
                {
                    "vulnerability": "VCID-rssx-5uc4-qbbu"
                },
                {
                    "vulnerability": "VCID-uvth-ajst-4udu"
                },
                {
                    "vulnerability": "VCID-wucn-bbxt-27gk"
                },
                {
                    "vulnerability": "VCID-ww7q-3qdb-eya5"
                },
                {
                    "vulnerability": "VCID-x2f1-6t18-xqgm"
                },
                {
                    "vulnerability": "VCID-xwsj-82z3-3kfk"
                },
                {
                    "vulnerability": "VCID-xxzh-tyxs-6ugj"
                },
                {
                    "vulnerability": "VCID-ypnm-uud2-wyey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4919?format=api",
            "purl": "pkg:deb/debian/mediawiki@1:1.12.0-2lenny9",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-17xy-hr3x-bffr"
                },
                {
                    "vulnerability": "VCID-1tce-jdy8-yke5"
                },
                {
                    "vulnerability": "VCID-3ry6-3y3d-pqbz"
                },
                {
                    "vulnerability": "VCID-7kcm-gvq9-5ydv"
                },
                {
                    "vulnerability": "VCID-8g9q-btdb-uybs"
                },
                {
                    "vulnerability": "VCID-8v3n-gcv9-p7ft"
                },
                {
                    "vulnerability": "VCID-9br2-t8bx-jude"
                },
                {
                    "vulnerability": "VCID-a1mq-jgwy-4bhs"
                },
                {
                    "vulnerability": "VCID-ajfs-yq8z-9ug4"
                },
                {
                    "vulnerability": "VCID-ajw1-97z6-q7gx"
                },
                {
                    "vulnerability": "VCID-bx8m-mdg4-vbdx"
                },
                {
                    "vulnerability": "VCID-cpuc-w8m7-nudw"
                },
                {
                    "vulnerability": "VCID-crjt-dux3-rbgw"
                },
                {
                    "vulnerability": "VCID-e8um-kuds-6bhc"
                },
                {
                    "vulnerability": "VCID-f51q-x4tn-z7dz"
                },
                {
                    "vulnerability": "VCID-fgkw-7jsk-tqdv"
                },
                {
                    "vulnerability": "VCID-fx7d-43ha-eqbb"
                },
                {
                    "vulnerability": "VCID-hgq5-7w26-pkcg"
                },
                {
                    "vulnerability": "VCID-hhgt-f8k5-jqbc"
                },
                {
                    "vulnerability": "VCID-nzgd-bwa8-7ugr"
                },
                {
                    "vulnerability": "VCID-pm1e-1y2c-qqea"
                },
                {
                    "vulnerability": "VCID-r3b5-7t8m-rff6"
                },
                {
                    "vulnerability": "VCID-rssx-5uc4-qbbu"
                },
                {
                    "vulnerability": "VCID-uvth-ajst-4udu"
                },
                {
                    "vulnerability": "VCID-wucn-bbxt-27gk"
                },
                {
                    "vulnerability": "VCID-ww7q-3qdb-eya5"
                },
                {
                    "vulnerability": "VCID-x2f1-6t18-xqgm"
                },
                {
                    "vulnerability": "VCID-xwsj-82z3-3kfk"
                },
                {
                    "vulnerability": "VCID-xxzh-tyxs-6ugj"
                },
                {
                    "vulnerability": "VCID-ypnm-uud2-wyey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.12.0-2lenny9"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4920?format=api",
            "purl": "pkg:deb/debian/mediawiki@1:1.15.5-2squeeze6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-17xy-hr3x-bffr"
                },
                {
                    "vulnerability": "VCID-1tce-jdy8-yke5"
                },
                {
                    "vulnerability": "VCID-3ry6-3y3d-pqbz"
                },
                {
                    "vulnerability": "VCID-7kcm-gvq9-5ydv"
                },
                {
                    "vulnerability": "VCID-8g9q-btdb-uybs"
                },
                {
                    "vulnerability": "VCID-8v3n-gcv9-p7ft"
                },
                {
                    "vulnerability": "VCID-9br2-t8bx-jude"
                },
                {
                    "vulnerability": "VCID-a1mq-jgwy-4bhs"
                },
                {
                    "vulnerability": "VCID-ajfs-yq8z-9ug4"
                },
                {
                    "vulnerability": "VCID-ajw1-97z6-q7gx"
                },
                {
                    "vulnerability": "VCID-bx8m-mdg4-vbdx"
                },
                {
                    "vulnerability": "VCID-cpuc-w8m7-nudw"
                },
                {
                    "vulnerability": "VCID-crjt-dux3-rbgw"
                },
                {
                    "vulnerability": "VCID-e8um-kuds-6bhc"
                },
                {
                    "vulnerability": "VCID-f51q-x4tn-z7dz"
                },
                {
                    "vulnerability": "VCID-fgkw-7jsk-tqdv"
                },
                {
                    "vulnerability": "VCID-fx7d-43ha-eqbb"
                },
                {
                    "vulnerability": "VCID-hgq5-7w26-pkcg"
                },
                {
                    "vulnerability": "VCID-hhgt-f8k5-jqbc"
                },
                {
                    "vulnerability": "VCID-nzgd-bwa8-7ugr"
                },
                {
                    "vulnerability": "VCID-pm1e-1y2c-qqea"
                },
                {
                    "vulnerability": "VCID-r3b5-7t8m-rff6"
                },
                {
                    "vulnerability": "VCID-rssx-5uc4-qbbu"
                },
                {
                    "vulnerability": "VCID-uvth-ajst-4udu"
                },
                {
                    "vulnerability": "VCID-wucn-bbxt-27gk"
                },
                {
                    "vulnerability": "VCID-ww7q-3qdb-eya5"
                },
                {
                    "vulnerability": "VCID-x2f1-6t18-xqgm"
                },
                {
                    "vulnerability": "VCID-xwsj-82z3-3kfk"
                },
                {
                    "vulnerability": "VCID-xxzh-tyxs-6ugj"
                },
                {
                    "vulnerability": "VCID-ypnm-uud2-wyey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.15.5-2squeeze6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4921?format=api",
            "purl": "pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-0%2Bdeb7u3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-17xy-hr3x-bffr"
                },
                {
                    "vulnerability": "VCID-1tce-jdy8-yke5"
                },
                {
                    "vulnerability": "VCID-3ry6-3y3d-pqbz"
                },
                {
                    "vulnerability": "VCID-8g9q-btdb-uybs"
                },
                {
                    "vulnerability": "VCID-8v3n-gcv9-p7ft"
                },
                {
                    "vulnerability": "VCID-a1mq-jgwy-4bhs"
                },
                {
                    "vulnerability": "VCID-ajfs-yq8z-9ug4"
                },
                {
                    "vulnerability": "VCID-ajw1-97z6-q7gx"
                },
                {
                    "vulnerability": "VCID-bx8m-mdg4-vbdx"
                },
                {
                    "vulnerability": "VCID-crjt-dux3-rbgw"
                },
                {
                    "vulnerability": "VCID-f51q-x4tn-z7dz"
                },
                {
                    "vulnerability": "VCID-fx7d-43ha-eqbb"
                },
                {
                    "vulnerability": "VCID-hgq5-7w26-pkcg"
                },
                {
                    "vulnerability": "VCID-hhgt-f8k5-jqbc"
                },
                {
                    "vulnerability": "VCID-pm1e-1y2c-qqea"
                },
                {
                    "vulnerability": "VCID-r3b5-7t8m-rff6"
                },
                {
                    "vulnerability": "VCID-uvth-ajst-4udu"
                },
                {
                    "vulnerability": "VCID-wucn-bbxt-27gk"
                },
                {
                    "vulnerability": "VCID-x2f1-6t18-xqgm"
                },
                {
                    "vulnerability": "VCID-xwsj-82z3-3kfk"
                },
                {
                    "vulnerability": "VCID-xxzh-tyxs-6ugj"
                },
                {
                    "vulnerability": "VCID-ypnm-uud2-wyey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-0%252Bdeb7u3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4922?format=api",
            "purl": "pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-17xy-hr3x-bffr"
                },
                {
                    "vulnerability": "VCID-1tce-jdy8-yke5"
                },
                {
                    "vulnerability": "VCID-3ry6-3y3d-pqbz"
                },
                {
                    "vulnerability": "VCID-8g9q-btdb-uybs"
                },
                {
                    "vulnerability": "VCID-8v3n-gcv9-p7ft"
                },
                {
                    "vulnerability": "VCID-a1mq-jgwy-4bhs"
                },
                {
                    "vulnerability": "VCID-ajfs-yq8z-9ug4"
                },
                {
                    "vulnerability": "VCID-ajw1-97z6-q7gx"
                },
                {
                    "vulnerability": "VCID-bx8m-mdg4-vbdx"
                },
                {
                    "vulnerability": "VCID-crjt-dux3-rbgw"
                },
                {
                    "vulnerability": "VCID-f51q-x4tn-z7dz"
                },
                {
                    "vulnerability": "VCID-fx7d-43ha-eqbb"
                },
                {
                    "vulnerability": "VCID-hgq5-7w26-pkcg"
                },
                {
                    "vulnerability": "VCID-hhgt-f8k5-jqbc"
                },
                {
                    "vulnerability": "VCID-pm1e-1y2c-qqea"
                },
                {
                    "vulnerability": "VCID-r3b5-7t8m-rff6"
                },
                {
                    "vulnerability": "VCID-uvth-ajst-4udu"
                },
                {
                    "vulnerability": "VCID-wucn-bbxt-27gk"
                },
                {
                    "vulnerability": "VCID-x2f1-6t18-xqgm"
                },
                {
                    "vulnerability": "VCID-xwsj-82z3-3kfk"
                },
                {
                    "vulnerability": "VCID-xxzh-tyxs-6ugj"
                },
                {
                    "vulnerability": "VCID-ypnm-uud2-wyey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3"
        }
    ],
    "references": [
        {
            "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0365.json",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "6.4",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
                }
            ],
            "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0365.json"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-0365",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00303",
                    "scoring_system": "epss",
                    "scoring_elements": "0.53866",
                    "published_at": "2026-06-04T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-0365"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0365",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0365"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569782",
            "reference_id": "1569782",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569782"
        },
        {
            "reference_url": "https://security.archlinux.org/ASA-201704-3",
            "reference_id": "ASA-201704-3",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-201704-3"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-236",
            "reference_id": "AVG-236",
            "reference_type": "",
            "scores": [
                {
                    "value": "High",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-236"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 79,
            "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
            "description": "The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."
        }
    ],
    "exploits": [],
    "severity_range_score": "6.4 - 8.9",
    "exploitability": "0.5",
    "weighted_severity": "8.0",
    "risk_score": 4.0,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pm1e-1y2c-qqea"
}