Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/6843?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6843?format=api", "vulnerability_id": "VCID-yzb6-tgwx-wqgc", "summary": "multiple issues", "aliases": [ { "alias": "CVE-2022-30522" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/3513?format=api", "purl": "pkg:alpm/archlinux/apache@2.4.54-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/apache@2.4.54-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/75021?format=api", "purl": "pkg:apache/httpd@2.4.54", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.54" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/3512?format=api", "purl": "pkg:alpm/archlinux/apache@2.4.53-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c8y-usq6-q7bv" }, { "vulnerability": "VCID-6vkt-ka6n-afg4" }, { "vulnerability": "VCID-b2t9-mha2-juem" }, { "vulnerability": "VCID-gqk6-pf69-tuc3" }, { "vulnerability": "VCID-p3qx-nxc2-w3aj" }, { "vulnerability": "VCID-sgfu-c8hw-ekdk" }, { "vulnerability": "VCID-yzb6-tgwx-wqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/apache@2.4.53-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/75020?format=api", "purl": "pkg:apache/httpd@2.4.53", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c8y-usq6-q7bv" }, { "vulnerability": "VCID-6vkt-ka6n-afg4" }, { "vulnerability": "VCID-b2t9-mha2-juem" }, { "vulnerability": "VCID-e1xg-d6e5-e7by" }, { "vulnerability": "VCID-gqk6-pf69-tuc3" }, { "vulnerability": "VCID-p3qx-nxc2-w3aj" }, { "vulnerability": "VCID-sgfu-c8hw-ekdk" }, { "vulnerability": "VCID-yzb6-tgwx-wqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.53" } ], "references": [ { "reference_url": "https://security.archlinux.org/AVG-2763", "reference_id": "AVG-2763", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2763" }, { "reference_url": "https://httpd.apache.org/security/json/CVE-2022-30522.json", "reference_id": "CVE-2022-30522", "reference_type": "", "scores": [ { "value": "low", "scoring_system": "apache_httpd", "scoring_elements": "" } ], "url": "https://httpd.apache.org/security/json/CVE-2022-30522.json" } ], "weaknesses": [ { "cwe_id": 789, "name": "Memory Allocation with Excessive Size Value", "description": "The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated." } ], "exploits": [], "severity_range_score": "0.1 - 6.9", "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yzb6-tgwx-wqgc" }