Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/67798?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/67798?format=api", "vulnerability_id": "VCID-e8mu-qhbf-jqb5", "summary": "ICU: regexp engine missing look-behind expression range check", "aliases": [ { "alias": "CVE-2014-7923" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/347133?format=api", "purl": "pkg:deb/debian/icu@52.1-7.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-7.1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/347125?format=api", "purl": "pkg:deb/debian/icu@67.1-7?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@67.1-7%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/347123?format=api", "purl": "pkg:deb/debian/icu@72.1-3%2Bdeb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@72.1-3%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/347127?format=api", "purl": "pkg:deb/debian/icu@76.1-4?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@76.1-4%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/347126?format=api", "purl": "pkg:deb/debian/icu@78.3-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@78.3-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/335698?format=api", "purl": "pkg:ebuild/dev-libs/icu@54.1-r1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/icu@54.1-r1" }, { "url": "http://public2.vulnerablecode.io/api/packages/330827?format=api", "purl": "pkg:ebuild/www-client/chromium@40.0.2214.111", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/chromium@40.0.2214.111" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/272173?format=api", "purl": "pkg:rpm/redhat/chromium-browser@40.0.2214.91-1?arch=el6_6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1aav-fm42-3bdm" }, { "vulnerability": "VCID-333s-k9kx-sqgn" }, { "vulnerability": "VCID-3etr-qrkj-cffk" }, { "vulnerability": "VCID-4536-m2bg-s3hh" }, { "vulnerability": "VCID-4g3v-tw1s-nuft" }, { "vulnerability": "VCID-6h8d-p15m-kuf3" }, { "vulnerability": "VCID-745n-399y-euf7" }, { "vulnerability": "VCID-81ud-zre6-xyey" }, { "vulnerability": "VCID-8215-wvhz-eye2" }, { "vulnerability": "VCID-9352-zbdx-cbap" }, { "vulnerability": "VCID-9cnj-uqkb-yqah" }, { "vulnerability": "VCID-c2z8-4qy5-73de" }, { "vulnerability": "VCID-crgs-a1dt-ekbf" }, { "vulnerability": "VCID-e8mu-qhbf-jqb5" }, { "vulnerability": "VCID-ebct-1me2-xbdz" }, { "vulnerability": "VCID-fxqu-dtme-xffd" }, { "vulnerability": "VCID-jaxe-9ekz-wuen" }, { "vulnerability": "VCID-mmhg-8xyv-9bfc" }, { "vulnerability": "VCID-nrgt-2cqm-5qcx" }, { "vulnerability": "VCID-nufj-p1te-9qgj" }, { "vulnerability": "VCID-qtrc-ptp3-vbas" }, { "vulnerability": "VCID-tepu-2uf1-wya9" }, { "vulnerability": "VCID-uxa7-2j3w-auah" }, { "vulnerability": "VCID-vtnt-dd2f-ckbc" }, { "vulnerability": "VCID-whzk-44sc-zqe3" }, { "vulnerability": "VCID-wjm4-skm1-fugx" }, { "vulnerability": "VCID-y5rg-wzf2-bqh3" }, { "vulnerability": "VCID-yfk7-qawj-8ff7" }, { "vulnerability": "VCID-zufb-yyjq-y7cm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/chromium-browser@40.0.2214.91-1%3Farch=el6_6" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7923.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7923.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-7923", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02564", "scoring_system": "epss", "scoring_elements": "0.85769", "published_at": "2026-05-29T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-7923" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185202", "reference_id": "1185202", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185202" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776265", "reference_id": "776265", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776265" }, { "reference_url": "https://security.gentoo.org/glsa/201502-13", "reference_id": "GLSA-201502-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201502-13" }, { "reference_url": "https://security.gentoo.org/glsa/201503-06", "reference_id": "GLSA-201503-06", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-06" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0093", "reference_id": "RHSA-2015:0093", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0093" }, { "reference_url": "https://usn.ubuntu.com/2476-1/", "reference_id": "USN-2476-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2476-1/" }, { "reference_url": "https://usn.ubuntu.com/2522-1/", "reference_id": "USN-2522-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2522-1/" } ], "weaknesses": [ { "cwe_id": 122, "name": "Heap-based Buffer Overflow", "description": "A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc()." } ], "exploits": [], "severity_range_score": null, "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e8mu-qhbf-jqb5" }