GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/6604?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6604?format=api",
    "vulnerability_id": "VCID-jwu5-x8mg-67e4",
    "summary": "denial of service",
    "aliases": [
        {
            "alias": "CVE-2017-6840"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/3344?format=api",
            "purl": "pkg:alpm/archlinux/podofo@0.9.6-1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/podofo@0.9.6-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5605?format=api",
            "purl": "pkg:deb/debian/libpodofo@0.9.4-6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-md8c-ewv8-gyf9"
                },
                {
                    "vulnerability": "VCID-pxxn-ee4k-gkfq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libpodofo@0.9.4-6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/103216?format=api",
            "purl": "pkg:deb/debian/libpodofo@0.9.4-6?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libpodofo@0.9.4-6%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/103204?format=api",
            "purl": "pkg:deb/debian/libpodofo@0.9.7%2Bdfsg-2?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9u5b-zxg1-ckhm"
                },
                {
                    "vulnerability": "VCID-dxwr-uuk1-r7ae"
                },
                {
                    "vulnerability": "VCID-e4gd-51ds-1uhq"
                },
                {
                    "vulnerability": "VCID-gsap-as1s-gfbn"
                },
                {
                    "vulnerability": "VCID-rst2-gcq4-3fe9"
                },
                {
                    "vulnerability": "VCID-uzjh-z935-23hv"
                },
                {
                    "vulnerability": "VCID-verj-pcgf-gufp"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libpodofo@0.9.7%252Bdfsg-2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/103202?format=api",
            "purl": "pkg:deb/debian/libpodofo@0.9.8%2Bdfsg-3?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libpodofo@0.9.8%252Bdfsg-3%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/103207?format=api",
            "purl": "pkg:deb/debian/libpodofo@0.9.8%2Bdfsg-3.2?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libpodofo@0.9.8%252Bdfsg-3.2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/103205?format=api",
            "purl": "pkg:deb/debian/libpodofo@0.9.8%2Bdfsg-3.3?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libpodofo@0.9.8%252Bdfsg-3.3%3Fdistro=trixie"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/3343?format=api",
            "purl": "pkg:alpm/archlinux/podofo@0.9.5-2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-316u-w5wu-9feb"
                },
                {
                    "vulnerability": "VCID-3ahq-4tz8-nkhv"
                },
                {
                    "vulnerability": "VCID-3gwq-ra2s-x3bg"
                },
                {
                    "vulnerability": "VCID-63z7-jtyr-jug8"
                },
                {
                    "vulnerability": "VCID-7nu8-c9xv-sbdq"
                },
                {
                    "vulnerability": "VCID-9g2f-mkmf-a3a6"
                },
                {
                    "vulnerability": "VCID-a5k2-czfx-3qa8"
                },
                {
                    "vulnerability": "VCID-a97h-vdzy-e7cj"
                },
                {
                    "vulnerability": "VCID-dx1p-226q-mkb8"
                },
                {
                    "vulnerability": "VCID-esuc-bxyu-5yaf"
                },
                {
                    "vulnerability": "VCID-fma7-b6ey-hfce"
                },
                {
                    "vulnerability": "VCID-g61j-n2gq-1bfw"
                },
                {
                    "vulnerability": "VCID-gth2-na1d-1qdr"
                },
                {
                    "vulnerability": "VCID-jut9-e84m-d3eq"
                },
                {
                    "vulnerability": "VCID-jwu5-x8mg-67e4"
                },
                {
                    "vulnerability": "VCID-md8c-ewv8-gyf9"
                },
                {
                    "vulnerability": "VCID-nx3g-8rny-2ffm"
                },
                {
                    "vulnerability": "VCID-pkrw-gaqw-rfe3"
                },
                {
                    "vulnerability": "VCID-pxxn-ee4k-gkfq"
                },
                {
                    "vulnerability": "VCID-rpjn-u2v9-5baa"
                },
                {
                    "vulnerability": "VCID-vy5k-b77u-97ge"
                },
                {
                    "vulnerability": "VCID-wm3b-jyn4-dfd5"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/podofo@0.9.5-2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5603?format=api",
            "purl": "pkg:deb/debian/libpodofo@0.9.0-1.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-63z7-jtyr-jug8"
                },
                {
                    "vulnerability": "VCID-a5k2-czfx-3qa8"
                },
                {
                    "vulnerability": "VCID-a97h-vdzy-e7cj"
                },
                {
                    "vulnerability": "VCID-dx1p-226q-mkb8"
                },
                {
                    "vulnerability": "VCID-jut9-e84m-d3eq"
                },
                {
                    "vulnerability": "VCID-jwu5-x8mg-67e4"
                },
                {
                    "vulnerability": "VCID-md8c-ewv8-gyf9"
                },
                {
                    "vulnerability": "VCID-nx3g-8rny-2ffm"
                },
                {
                    "vulnerability": "VCID-pxxn-ee4k-gkfq"
                },
                {
                    "vulnerability": "VCID-rpjn-u2v9-5baa"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libpodofo@0.9.0-1.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5604?format=api",
            "purl": "pkg:deb/debian/libpodofo@0.9.0-1.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-63z7-jtyr-jug8"
                },
                {
                    "vulnerability": "VCID-a5k2-czfx-3qa8"
                },
                {
                    "vulnerability": "VCID-a97h-vdzy-e7cj"
                },
                {
                    "vulnerability": "VCID-dx1p-226q-mkb8"
                },
                {
                    "vulnerability": "VCID-jut9-e84m-d3eq"
                },
                {
                    "vulnerability": "VCID-jwu5-x8mg-67e4"
                },
                {
                    "vulnerability": "VCID-md8c-ewv8-gyf9"
                },
                {
                    "vulnerability": "VCID-nx3g-8rny-2ffm"
                },
                {
                    "vulnerability": "VCID-pxxn-ee4k-gkfq"
                },
                {
                    "vulnerability": "VCID-rpjn-u2v9-5baa"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libpodofo@0.9.0-1.2"
        }
    ],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6840",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.0037",
                    "scoring_system": "epss",
                    "scoring_elements": "0.59175",
                    "published_at": "2026-06-04T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6840"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6840",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6840"
        },
        {
            "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861557",
            "reference_id": "861557",
            "reference_type": "",
            "scores": [],
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861557"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-216",
            "reference_id": "AVG-216",
            "reference_type": "",
            "scores": [
                {
                    "value": "High",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-216"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "7.0 - 8.9",
    "exploitability": "0.5",
    "weighted_severity": "8.0",
    "risk_score": 4.0,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jwu5-x8mg-67e4"
}