Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/112528?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/112528?format=api", "purl": "pkg:rpm/redhat/openvswitch@2.4.1-2.git20160727?arch=el7ost", "type": "rpm", "namespace": "redhat", "name": "openvswitch", "version": "2.4.1-2.git20160727", "qualifiers": { "arch": "el7ost" }, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84284?format=api", "vulnerability_id": "VCID-21ps-f19w-87hx", "summary": "openvswitch: Buffer over-read while parsing the group mod OpenFlow message", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9265.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9265.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9265", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80511", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80574", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80518", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.8054", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80532", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80561", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80571", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80588", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80566", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81393", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81381", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81388", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81409", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81429", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.01843", "scoring_system": "epss", "scoring_elements": "0.83006", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.01843", "scoring_system": "epss", "scoring_elements": "0.83003", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.01843", "scoring_system": "epss", "scoring_elements": "0.83002", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9265" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9265", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9265" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:N/A:P" }, { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457335", "reference_id": "1457335", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457335" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863662", "reference_id": "863662", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863662" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2418", "reference_id": "RHSA-2017:2418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2553", "reference_id": "RHSA-2017:2553", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2553" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2648", "reference_id": "RHSA-2017:2648", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2648" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2665", "reference_id": "RHSA-2017:2665", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2665" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2692", "reference_id": "RHSA-2017:2692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2698", "reference_id": "RHSA-2017:2698", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2698" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2727", "reference_id": "RHSA-2017:2727", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "reference_url": "https://usn.ubuntu.com/3450-1/", "reference_id": "USN-3450-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3450-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2017-9265" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-21ps-f19w-87hx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84348?format=api", "vulnerability_id": "VCID-4rhb-vhvc-v3cx", "summary": "openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9214.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9214.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9214", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.8735", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87465", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87437", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87451", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87359", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87375", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87374", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87393", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87399", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87412", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87406", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87402", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87417", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.8742", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87415", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87431", "published_at": "2026-04-24T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9214" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9214", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9214" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:P/A:P" }, { "value": "7.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1456795", "reference_id": "1456795", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1456795" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863228", "reference_id": "863228", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863228" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2418", "reference_id": "RHSA-2017:2418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2553", "reference_id": "RHSA-2017:2553", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2553" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2648", "reference_id": "RHSA-2017:2648", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2648" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2665", "reference_id": "RHSA-2017:2665", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2665" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2692", "reference_id": "RHSA-2017:2692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2698", "reference_id": "RHSA-2017:2698", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2698" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2727", "reference_id": "RHSA-2017:2727", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "reference_url": "https://usn.ubuntu.com/3450-1/", "reference_id": "USN-3450-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3450-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2017-9214" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4rhb-vhvc-v3cx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84283?format=api", "vulnerability_id": "VCID-qrfh-87d5-ybh6", "summary": "openvswitch: Invalid processing of a malicious OpenFlow role status message", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9263.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9263.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9263", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31424", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31354", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00141", "scoring_system": "epss", "scoring_elements": "0.34394", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00141", "scoring_system": "epss", "scoring_elements": "0.34381", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00141", "scoring_system": "epss", "scoring_elements": "0.3434", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00141", "scoring_system": "epss", "scoring_elements": "0.33968", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00141", "scoring_system": "epss", "scoring_elements": "0.33948", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00141", "scoring_system": "epss", "scoring_elements": "0.33865", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48117", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48037", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48103", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48092", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48075", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48096", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48046", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48099", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48093", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9263" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9263", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9263" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P" }, { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457327", "reference_id": "1457327", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457327" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863655", "reference_id": "863655", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863655" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2418", "reference_id": "RHSA-2017:2418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2553", "reference_id": "RHSA-2017:2553", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2553" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2648", "reference_id": "RHSA-2017:2648", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2648" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2665", "reference_id": "RHSA-2017:2665", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2665" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2692", "reference_id": "RHSA-2017:2692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2698", "reference_id": "RHSA-2017:2698", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2698" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2727", "reference_id": "RHSA-2017:2727", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "reference_url": "https://usn.ubuntu.com/3450-1/", "reference_id": "USN-3450-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3450-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2017-9263" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qrfh-87d5-ybh6" } ], "fixing_vulnerabilities": [], "risk_score": "3.4", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openvswitch@2.4.1-2.git20160727%3Farch=el7ost" }