Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8425?format=api",
    "vulnerability_id": "VCID-j2z3-by4r-mkd9",
    "summary": "The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.",
    "aliases": [
        {
            "alias": "CVE-2022-31507"
        },
        {
            "alias": "GHSA-7488-6x3r-23w5"
        },
        {
            "alias": "PYSEC-2022-225"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27219?format=api",
            "purl": "pkg:pypi/ganga@8.5.10",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.5.10"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27133?format=api",
            "purl": "pkg:pypi/ganga@6.1.15",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.1.15"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27134?format=api",
            "purl": "pkg:pypi/ganga@6.1.16",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.1.16"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27135?format=api",
            "purl": "pkg:pypi/ganga@6.1.17",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.1.17"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27136?format=api",
            "purl": "pkg:pypi/ganga@6.1.18",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.1.18"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27137?format=api",
            "purl": "pkg:pypi/ganga@6.1.19",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.1.19"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27138?format=api",
            "purl": "pkg:pypi/ganga@6.1.20",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.1.20"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27139?format=api",
            "purl": "pkg:pypi/ganga@6.1.21",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.1.21"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27140?format=api",
            "purl": "pkg:pypi/ganga@6.1.22",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.1.22"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27141?format=api",
            "purl": "pkg:pypi/ganga@6.1.23",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.1.23"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27142?format=api",
            "purl": "pkg:pypi/ganga@6.1.24",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.1.24"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27143?format=api",
            "purl": "pkg:pypi/ganga@6.1.25",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.1.25"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27144?format=api",
            "purl": "pkg:pypi/ganga@6.2.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.2.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27145?format=api",
            "purl": "pkg:pypi/ganga@6.2.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.2.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27146?format=api",
            "purl": "pkg:pypi/ganga@6.2.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.2.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27147?format=api",
            "purl": "pkg:pypi/ganga@6.2.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.2.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27148?format=api",
            "purl": "pkg:pypi/ganga@6.3.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.3.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27149?format=api",
            "purl": "pkg:pypi/ganga@6.3.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.3.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27150?format=api",
            "purl": "pkg:pypi/ganga@6.4.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.4.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27151?format=api",
            "purl": "pkg:pypi/ganga@6.5.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.5.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27152?format=api",
            "purl": "pkg:pypi/ganga@6.5.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.5.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27153?format=api",
            "purl": "pkg:pypi/ganga@6.5.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.5.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27154?format=api",
            "purl": "pkg:pypi/ganga@6.6.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.6.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27155?format=api",
            "purl": "pkg:pypi/ganga@6.6.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.6.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27156?format=api",
            "purl": "pkg:pypi/ganga@6.6.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.6.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27157?format=api",
            "purl": "pkg:pypi/ganga@6.6.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.6.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27158?format=api",
            "purl": "pkg:pypi/ganga@6.6.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.6.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27159?format=api",
            "purl": "pkg:pypi/ganga@6.7.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.7.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27160?format=api",
            "purl": "pkg:pypi/ganga@6.7.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.7.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27161?format=api",
            "purl": "pkg:pypi/ganga@6.7.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.7.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27162?format=api",
            "purl": "pkg:pypi/ganga@6.7.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.7.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27163?format=api",
            "purl": "pkg:pypi/ganga@6.7.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@6.7.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27164?format=api",
            "purl": "pkg:pypi/ganga@7.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27165?format=api",
            "purl": "pkg:pypi/ganga@7.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27166?format=api",
            "purl": "pkg:pypi/ganga@7.0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27167?format=api",
            "purl": "pkg:pypi/ganga@7.0.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.0.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27168?format=api",
            "purl": "pkg:pypi/ganga@7.0.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.0.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27169?format=api",
            "purl": "pkg:pypi/ganga@7.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27170?format=api",
            "purl": "pkg:pypi/ganga@7.1.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27171?format=api",
            "purl": "pkg:pypi/ganga@7.1.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27172?format=api",
            "purl": "pkg:pypi/ganga@7.1.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27173?format=api",
            "purl": "pkg:pypi/ganga@7.1.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27174?format=api",
            "purl": "pkg:pypi/ganga@7.1.6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27175?format=api",
            "purl": "pkg:pypi/ganga@7.1.7",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27176?format=api",
            "purl": "pkg:pypi/ganga@7.1.8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27177?format=api",
            "purl": "pkg:pypi/ganga@7.1.9",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.9"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27178?format=api",
            "purl": "pkg:pypi/ganga@7.1.10",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.10"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27179?format=api",
            "purl": "pkg:pypi/ganga@7.1.11",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.11"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27180?format=api",
            "purl": "pkg:pypi/ganga@7.1.12",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.12"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27181?format=api",
            "purl": "pkg:pypi/ganga@7.1.13",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.13"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27182?format=api",
            "purl": "pkg:pypi/ganga@7.1.14",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.14"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27183?format=api",
            "purl": "pkg:pypi/ganga@7.1.15",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@7.1.15"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27184?format=api",
            "purl": "pkg:pypi/ganga@8.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27185?format=api",
            "purl": "pkg:pypi/ganga@8.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27186?format=api",
            "purl": "pkg:pypi/ganga@8.0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27187?format=api",
            "purl": "pkg:pypi/ganga@8.0.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.0.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27188?format=api",
            "purl": "pkg:pypi/ganga@8.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27189?format=api",
            "purl": "pkg:pypi/ganga@8.2.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.2.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27190?format=api",
            "purl": "pkg:pypi/ganga@8.2.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.2.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27191?format=api",
            "purl": "pkg:pypi/ganga@8.2.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.2.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27192?format=api",
            "purl": "pkg:pypi/ganga@8.2.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.2.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27193?format=api",
            "purl": "pkg:pypi/ganga@8.2.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.2.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27194?format=api",
            "purl": "pkg:pypi/ganga@8.3.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.3.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27195?format=api",
            "purl": "pkg:pypi/ganga@8.3.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.3.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27196?format=api",
            "purl": "pkg:pypi/ganga@8.3.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.3.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27197?format=api",
            "purl": "pkg:pypi/ganga@8.3.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.3.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27198?format=api",
            "purl": "pkg:pypi/ganga@8.3.4rc0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.3.4rc0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27199?format=api",
            "purl": "pkg:pypi/ganga@8.3.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.3.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27200?format=api",
            "purl": "pkg:pypi/ganga@8.3.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.3.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27201?format=api",
            "purl": "pkg:pypi/ganga@8.4.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.4.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27202?format=api",
            "purl": "pkg:pypi/ganga@8.4.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.4.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27203?format=api",
            "purl": "pkg:pypi/ganga@8.4.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.4.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27204?format=api",
            "purl": "pkg:pypi/ganga@8.4.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.4.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27205?format=api",
            "purl": "pkg:pypi/ganga@8.4.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.4.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27206?format=api",
            "purl": "pkg:pypi/ganga@8.4.6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.4.6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27207?format=api",
            "purl": "pkg:pypi/ganga@8.4.7",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.4.7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27208?format=api",
            "purl": "pkg:pypi/ganga@8.4.8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.4.8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27209?format=api",
            "purl": "pkg:pypi/ganga@8.5.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.5.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27210?format=api",
            "purl": "pkg:pypi/ganga@8.5.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.5.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27211?format=api",
            "purl": "pkg:pypi/ganga@8.5.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.5.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27212?format=api",
            "purl": "pkg:pypi/ganga@8.5.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.5.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27213?format=api",
            "purl": "pkg:pypi/ganga@8.5.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.5.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27214?format=api",
            "purl": "pkg:pypi/ganga@8.5.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.5.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27215?format=api",
            "purl": "pkg:pypi/ganga@8.5.6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.5.6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27216?format=api",
            "purl": "pkg:pypi/ganga@8.5.7",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.5.7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27217?format=api",
            "purl": "pkg:pypi/ganga@8.5.8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.5.8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27218?format=api",
            "purl": "pkg:pypi/ganga@8.5.9",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-j2z3-by4r-mkd9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ganga@8.5.9"
        }
    ],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-31507",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.0059",
                    "scoring_system": "epss",
                    "scoring_elements": "0.69503",
                    "published_at": "2026-05-30T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-31507"
        },
        {
            "reference_url": "https://github.com/advisories/GHSA-7488-6x3r-23w5",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "cvssv3.1_qr",
                    "scoring_elements": ""
                },
                {
                    "value": "9.2",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:H/SI:N/SA:L"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/advisories/GHSA-7488-6x3r-23w5"
        },
        {
            "reference_url": "https://github.com/ganga-devs/ganga",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
                },
                {
                    "value": "9.2",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:H/SI:N/SA:L"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/ganga-devs/ganga"
        },
        {
            "reference_url": "https://github.com/ganga-devs/ganga/commit/730e7aba192407d35eb37dd7938d49071124be8c",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
                },
                {
                    "value": "9.2",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:H/SI:N/SA:L"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/ganga-devs/ganga/commit/730e7aba192407d35eb37dd7938d49071124be8c"
        },
        {
            "reference_url": "https://github.com/ganga-devs/ganga/releases/tag/8.5.10",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
                },
                {
                    "value": "9.2",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:H/SI:N/SA:L"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/ganga-devs/ganga/releases/tag/8.5.10"
        },
        {
            "reference_url": "https://github.com/github/securitylab/issues/669#issuecomment-1117265726",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
                },
                {
                    "value": "9.2",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:H/SI:N/SA:L"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/github/securitylab/issues/669#issuecomment-1117265726"
        },
        {
            "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ganga/PYSEC-2022-225.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
                },
                {
                    "value": "9.2",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:H/SI:N/SA:L"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ganga/PYSEC-2022-225.yaml"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31507",
            "reference_id": "CVE-2022-31507",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
                },
                {
                    "value": "9.2",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:H/SI:N/SA:L"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31507"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 22,
            "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
            "description": "The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory."
        }
    ],
    "exploits": [],
    "severity_range_score": "9.0 - 10.0",
    "exploitability": "0.5",
    "weighted_severity": "9.0",
    "risk_score": 4.5,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j2z3-by4r-mkd9"
}