Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/978?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/978?format=api",
    "vulnerability_id": "VCID-fczb-a9ef-d3ap",
    "summary": "",
    "aliases": [
        {
            "alias": "CVE-2016-1981"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/101440?format=api",
            "purl": "pkg:deb/debian/qemu@1:2.5%2Bdfsg-5?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.5%252Bdfsg-5%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/101400?format=api",
            "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1ge6-kys6-3be9"
                },
                {
                    "vulnerability": "VCID-5zan-9uk7-tkbj"
                },
                {
                    "vulnerability": "VCID-6xbd-6e4e-2kdx"
                },
                {
                    "vulnerability": "VCID-7axm-aanq-tqa6"
                },
                {
                    "vulnerability": "VCID-8c1p-17pk-ukd4"
                },
                {
                    "vulnerability": "VCID-8tn2-j78e-mbb9"
                },
                {
                    "vulnerability": "VCID-9yqp-m6x5-eyh1"
                },
                {
                    "vulnerability": "VCID-e423-8d42-tkdh"
                },
                {
                    "vulnerability": "VCID-hg1w-2ns9-mbat"
                },
                {
                    "vulnerability": "VCID-nea8-qgt9-63fy"
                },
                {
                    "vulnerability": "VCID-pvvb-hzkq-gbf7"
                },
                {
                    "vulnerability": "VCID-q5b1-dkud-zya7"
                },
                {
                    "vulnerability": "VCID-sx77-xz6p-5khh"
                },
                {
                    "vulnerability": "VCID-w4gk-d65y-dqff"
                },
                {
                    "vulnerability": "VCID-wwqb-f8kp-syer"
                },
                {
                    "vulnerability": "VCID-xck7-fkrx-zbd2"
                },
                {
                    "vulnerability": "VCID-xfpp-7u4x-ybaj"
                },
                {
                    "vulnerability": "VCID-y2yz-9gr6-7uaz"
                },
                {
                    "vulnerability": "VCID-yk76-q8un-b3ca"
                },
                {
                    "vulnerability": "VCID-zrcr-7xr9-k7bc"
                },
                {
                    "vulnerability": "VCID-zw41-wzst-bbfh"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/101398?format=api",
            "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5zan-9uk7-tkbj"
                },
                {
                    "vulnerability": "VCID-6xbd-6e4e-2kdx"
                },
                {
                    "vulnerability": "VCID-8tn2-j78e-mbb9"
                },
                {
                    "vulnerability": "VCID-cxb5-ps1u-jkhx"
                },
                {
                    "vulnerability": "VCID-ua92-uymv-rfdg"
                },
                {
                    "vulnerability": "VCID-w4gk-d65y-dqff"
                },
                {
                    "vulnerability": "VCID-wwqb-f8kp-syer"
                },
                {
                    "vulnerability": "VCID-y2yz-9gr6-7uaz"
                },
                {
                    "vulnerability": "VCID-yk76-q8un-b3ca"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/101403?format=api",
            "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4p3f-84d2-aqcu"
                },
                {
                    "vulnerability": "VCID-5zan-9uk7-tkbj"
                },
                {
                    "vulnerability": "VCID-6e19-9wsk-nye4"
                },
                {
                    "vulnerability": "VCID-6xbd-6e4e-2kdx"
                },
                {
                    "vulnerability": "VCID-81v2-tkvj-qqbe"
                },
                {
                    "vulnerability": "VCID-c16z-ca8e-rkhu"
                },
                {
                    "vulnerability": "VCID-cxb5-ps1u-jkhx"
                },
                {
                    "vulnerability": "VCID-fqvy-zgea-b7d6"
                },
                {
                    "vulnerability": "VCID-h3me-ktz3-c7dw"
                },
                {
                    "vulnerability": "VCID-mkmq-psus-f3hs"
                },
                {
                    "vulnerability": "VCID-msrv-b6b8-wqey"
                },
                {
                    "vulnerability": "VCID-rgbz-jtuq-ffg7"
                },
                {
                    "vulnerability": "VCID-sgd1-uzxs-5yh3"
                },
                {
                    "vulnerability": "VCID-uw6e-53zw-9kf2"
                },
                {
                    "vulnerability": "VCID-wwqb-f8kp-syer"
                },
                {
                    "vulnerability": "VCID-wxhk-n1v2-dbaj"
                },
                {
                    "vulnerability": "VCID-y2yz-9gr6-7uaz"
                },
                {
                    "vulnerability": "VCID-yk76-q8un-b3ca"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/101401?format=api",
            "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-2?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-6e19-9wsk-nye4"
                },
                {
                    "vulnerability": "VCID-81v2-tkvj-qqbe"
                },
                {
                    "vulnerability": "VCID-c16z-ca8e-rkhu"
                },
                {
                    "vulnerability": "VCID-fqvy-zgea-b7d6"
                },
                {
                    "vulnerability": "VCID-h3me-ktz3-c7dw"
                },
                {
                    "vulnerability": "VCID-msrv-b6b8-wqey"
                },
                {
                    "vulnerability": "VCID-sgd1-uzxs-5yh3"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/101402?format=api",
            "purl": "pkg:deb/debian/qemu@1:11.0.1%2Bds-1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.1%252Bds-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5253?format=api",
            "purl": "pkg:ebuild/app-emulation/qemu@2.5.0-r2",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/qemu@2.5.0-r2"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/356190?format=api",
            "purl": "pkg:rpm/redhat/qemu-kvm@10:1.5.3-126?arch=el7",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-46u6-nhzy-ybev"
                },
                {
                    "vulnerability": "VCID-fczb-a9ef-d3ap"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/qemu-kvm@10:1.5.3-126%3Farch=el7"
        }
    ],
    "references": [
        {
            "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1981.json",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1981.json"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-1981",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00062",
                    "scoring_system": "epss",
                    "scoring_elements": "0.19661",
                    "published_at": "2026-06-11T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-1981"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7295",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7295"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7504",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7504"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7512",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7512"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7549",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7549"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8345",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8345"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8504",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8504"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8550",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8550"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8558",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8558"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8567",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8567"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8568",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8568"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8613",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8613"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8619",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8619"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8743",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8743"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8744",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8744"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8745",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8745"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1568",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1568"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1714",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1714"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1922",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1922"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1981",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1981"
        },
        {
            "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "2.3",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:A/AC:M/Au:S/C:N/I:N/A:P"
                }
            ],
            "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1298570",
            "reference_id": "1298570",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1298570"
        },
        {
            "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812307",
            "reference_id": "812307",
            "reference_type": "",
            "scores": [],
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812307"
        },
        {
            "reference_url": "https://security.gentoo.org/glsa/201604-01",
            "reference_id": "GLSA-201604-01",
            "reference_type": "",
            "scores": [],
            "url": "https://security.gentoo.org/glsa/201604-01"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2016:2585",
            "reference_id": "RHSA-2016:2585",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2016:2585"
        },
        {
            "reference_url": "https://usn.ubuntu.com/2891-1/",
            "reference_id": "USN-2891-1",
            "reference_type": "",
            "scores": [],
            "url": "https://usn.ubuntu.com/2891-1/"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 835,
            "name": "Loop with Unreachable Exit Condition ('Infinite Loop')",
            "description": "The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop."
        }
    ],
    "exploits": [],
    "severity_range_score": "2.3 - 2.3",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fczb-a9ef-d3ap"
}