Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/curl@7.59.0-r0?arch=x86_64&distroversion=v3.9&reponame=main
Typeapk
Namespacealpine
Namecurl
Version7.59.0-r0
Qualifiers
arch x86_64
distroversion v3.9
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version7.60.0-r0
Latest_non_vulnerable_version7.64.0-r4
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-cfm3-jg25-2bge
vulnerability_id VCID-cfm3-jg25-2bge
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000120
reference_id
reference_type
scores
0
value 0.01298
scoring_system epss
scoring_elements 0.80132
published_at 2026-06-11T12:55:00Z
1
value 0.01298
scoring_system epss
scoring_elements 0.80194
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000120
2
reference_url https://curl.haxx.se/docs/adv_2018-9cd6.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://curl.haxx.se/docs/adv_2018-9cd6.html
3
reference_url https://curl.se/docs/CVE-2018-1000120.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value High
scoring_system cvssv3.1
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://curl.se/docs/CVE-2018-1000120.html
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://github.com/coapp-packages/curl
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/coapp-packages/curl
9
reference_url https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1000120
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-1000120
11
reference_url https://usn.ubuntu.com/3598-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/3598-1
12
reference_url https://usn.ubuntu.com/3598-2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/3598-2
13
reference_url https://web.archive.org/web/20201220134105/http://www.securitytracker.com/id/1040531
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20201220134105/http://www.securitytracker.com/id/1040531
14
reference_url https://web.archive.org/web/20201220134609/http://www.securityfocus.com/bid/103414
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20201220134609/http://www.securityfocus.com/bid/103414
15
reference_url https://www.debian.org/security/2018/dsa-4136
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2018/dsa-4136
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1552628
reference_id 1552628
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1552628
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
reference_id 893546
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
18
reference_url https://security.archlinux.org/ASA-201803-15
reference_id ASA-201803-15
reference_type
scores
url https://security.archlinux.org/ASA-201803-15
19
reference_url https://security.archlinux.org/ASA-201803-16
reference_id ASA-201803-16
reference_type
scores
url https://security.archlinux.org/ASA-201803-16
20
reference_url https://security.archlinux.org/ASA-201803-17
reference_id ASA-201803-17
reference_type
scores
url https://security.archlinux.org/ASA-201803-17
21
reference_url https://security.archlinux.org/ASA-201803-18
reference_id ASA-201803-18
reference_type
scores
url https://security.archlinux.org/ASA-201803-18
22
reference_url https://security.archlinux.org/ASA-201803-19
reference_id ASA-201803-19
reference_type
scores
url https://security.archlinux.org/ASA-201803-19
23
reference_url https://security.archlinux.org/ASA-201803-20
reference_id ASA-201803-20
reference_type
scores
url https://security.archlinux.org/ASA-201803-20
24
reference_url https://security.archlinux.org/AVG-653
reference_id AVG-653
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-653
25
reference_url https://security.archlinux.org/AVG-654
reference_id AVG-654
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-654
26
reference_url https://security.archlinux.org/AVG-655
reference_id AVG-655
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-655
27
reference_url https://security.archlinux.org/AVG-656
reference_id AVG-656
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-656
28
reference_url https://security.archlinux.org/AVG-660
reference_id AVG-660
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-660
29
reference_url https://security.archlinux.org/AVG-661
reference_id AVG-661
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-661
30
reference_url https://github.com/advisories/GHSA-674j-7m97-j2p9
reference_id GHSA-674j-7m97-j2p9
reference_type
scores
url https://github.com/advisories/GHSA-674j-7m97-j2p9
31
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
32
reference_url https://access.redhat.com/errata/RHSA-2018:3157
reference_id RHSA-2018:3157
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3157
33
reference_url https://access.redhat.com/errata/RHSA-2018:3558
reference_id RHSA-2018:3558
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3558
34
reference_url https://access.redhat.com/errata/RHSA-2019:1543
reference_id RHSA-2019:1543
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:1543
35
reference_url https://access.redhat.com/errata/RHSA-2020:0544
reference_id RHSA-2020:0544
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0544
36
reference_url https://access.redhat.com/errata/RHSA-2020:0594
reference_id RHSA-2020:0594
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0594
37
reference_url https://usn.ubuntu.com/3598-1/
reference_id USN-3598-1
reference_type
scores
url https://usn.ubuntu.com/3598-1/
fixed_packages
0
url pkg:apk/alpine/curl@7.59.0-r0?arch=x86_64&distroversion=v3.9&reponame=main
purl pkg:apk/alpine/curl@7.59.0-r0?arch=x86_64&distroversion=v3.9&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@7.59.0-r0%3Farch=x86_64&distroversion=v3.9&reponame=main
aliases CVE-2018-1000120, GHSA-674j-7m97-j2p9
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cfm3-jg25-2bge
1
url VCID-geum-kp4d-kqbv
vulnerability_id VCID-geum-kp4d-kqbv
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000121.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000121.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000121
reference_id
reference_type
scores
0
value 0.02668
scoring_system epss
scoring_elements 0.86135
published_at 2026-06-11T12:55:00Z
1
value 0.02668
scoring_system epss
scoring_elements 0.86185
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000121
2
reference_url https://curl.se/docs/CVE-2018-1000121.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000121.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1552631
reference_id 1552631
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1552631
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
reference_id 893546
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
9
reference_url https://security.archlinux.org/ASA-201803-15
reference_id ASA-201803-15
reference_type
scores
url https://security.archlinux.org/ASA-201803-15
10
reference_url https://security.archlinux.org/ASA-201803-16
reference_id ASA-201803-16
reference_type
scores
url https://security.archlinux.org/ASA-201803-16
11
reference_url https://security.archlinux.org/ASA-201803-17
reference_id ASA-201803-17
reference_type
scores
url https://security.archlinux.org/ASA-201803-17
12
reference_url https://security.archlinux.org/ASA-201803-18
reference_id ASA-201803-18
reference_type
scores
url https://security.archlinux.org/ASA-201803-18
13
reference_url https://security.archlinux.org/ASA-201803-19
reference_id ASA-201803-19
reference_type
scores
url https://security.archlinux.org/ASA-201803-19
14
reference_url https://security.archlinux.org/ASA-201803-20
reference_id ASA-201803-20
reference_type
scores
url https://security.archlinux.org/ASA-201803-20
15
reference_url https://security.archlinux.org/AVG-653
reference_id AVG-653
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-653
16
reference_url https://security.archlinux.org/AVG-654
reference_id AVG-654
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-654
17
reference_url https://security.archlinux.org/AVG-655
reference_id AVG-655
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-655
18
reference_url https://security.archlinux.org/AVG-656
reference_id AVG-656
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-656
19
reference_url https://security.archlinux.org/AVG-660
reference_id AVG-660
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-660
20
reference_url https://security.archlinux.org/AVG-661
reference_id AVG-661
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-661
21
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
22
reference_url https://access.redhat.com/errata/RHSA-2018:3157
reference_id RHSA-2018:3157
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3157
23
reference_url https://access.redhat.com/errata/RHSA-2018:3558
reference_id RHSA-2018:3558
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3558
24
reference_url https://access.redhat.com/errata/RHSA-2019:1543
reference_id RHSA-2019:1543
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:1543
25
reference_url https://access.redhat.com/errata/RHSA-2020:0544
reference_id RHSA-2020:0544
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0544
26
reference_url https://access.redhat.com/errata/RHSA-2020:0594
reference_id RHSA-2020:0594
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0594
27
reference_url https://usn.ubuntu.com/3598-1/
reference_id USN-3598-1
reference_type
scores
url https://usn.ubuntu.com/3598-1/
fixed_packages
0
url pkg:apk/alpine/curl@7.59.0-r0?arch=x86_64&distroversion=v3.9&reponame=main
purl pkg:apk/alpine/curl@7.59.0-r0?arch=x86_64&distroversion=v3.9&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@7.59.0-r0%3Farch=x86_64&distroversion=v3.9&reponame=main
aliases CVE-2018-1000121
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-geum-kp4d-kqbv
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@7.59.0-r0%3Farch=x86_64&distroversion=v3.9&reponame=main