Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community

Type apk

Namespace alpine

Name ffmpeg4

Version 3.4.3-r0

Qualifiers

arch	s390x
distroversion	v3.22
reponame	community

Subpath

Is_vulnerable false

Next_non_vulnerable_version 3.4.4-r0

Latest_non_vulnerable_version 4.4.1-r0

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-8ted-8hxz-5kev

vulnerability_id VCID-8ted-8hxz-5kev

summary An improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2018-12458

reference_id

reference_type

scores

value	0.00571
scoring_system	epss
scoring_elements	0.68992
published_at	2026-06-04T12:55:00Z

value	0.00571
scoring_system	epss
scoring_elements	0.69031
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2018-12458

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10001
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10001

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12458
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12458

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13300
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13300

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13302
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13302

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14394
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14394

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999010
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999010

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999012
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999012

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999013
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999013

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6621
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6621

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7557
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7557

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	5.3
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

fixed_packages

url	pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community
purl	pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/ffmpeg4@3.4.3-r0%3Farch=s390x&distroversion=v3.22&reponame=community

aliases CVE-2018-12458

risk_score 1.3

exploitability 0.5

weighted_severity 2.6

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8ted-8hxz-5kev

url VCID-8y2n-3t3r-b3dm

vulnerability_id VCID-8y2n-3t3r-b3dm

summary The decode_init function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via an AVI file.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2018-10001

reference_id

reference_type

scores

value	0.00708
scoring_system	epss
scoring_elements	0.72561
published_at	2026-06-04T12:55:00Z

value	0.00708
scoring_system	epss
scoring_elements	0.72601
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2018-10001

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10001
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10001

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12458
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12458

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13300
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13300

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13302
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13302

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14394
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14394

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999010
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999010

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999012
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999012

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999013
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999013

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6621
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6621

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7557
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7557

reference_url	https://security.gentoo.org/glsa/202003-65
reference_id	GLSA-202003-65
reference_type
scores
url	https://security.gentoo.org/glsa/202003-65

fixed_packages

url	pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community
purl	pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/ffmpeg4@3.4.3-r0%3Farch=s390x&distroversion=v3.22&reponame=community

aliases CVE-2018-10001

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8y2n-3t3r-b3dm

url VCID-fb5p-qf1c-b7he

vulnerability_id VCID-fb5p-qf1c-b7he

summary The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2018-7751

reference_id

reference_type

scores

value	0.0045
scoring_system	epss
scoring_elements	0.63956
published_at	2026-06-04T12:55:00Z

value	0.0045
scoring_system	epss
scoring_elements	0.63998
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2018-7751

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7751
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7751

reference_url	https://security.gentoo.org/glsa/202003-65
reference_id	GLSA-202003-65
reference_type
scores
url	https://security.gentoo.org/glsa/202003-65

fixed_packages

url	pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community
purl	pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/ffmpeg4@3.4.3-r0%3Farch=s390x&distroversion=v3.22&reponame=community

aliases CVE-2018-7751

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fb5p-qf1c-b7he

url VCID-utzv-46dm-myhs

vulnerability_id VCID-utzv-46dm-myhs

summary The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service (Out of array read) via an AVI file with crafted dimensions within chroma subsampling data.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2018-7557

reference_id

reference_type

scores

value	0.00398
scoring_system	epss
scoring_elements	0.60909
published_at	2026-06-04T12:55:00Z

value	0.00398
scoring_system	epss
scoring_elements	0.60958
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2018-7557

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10001
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10001

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12458
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12458

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13300
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13300

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13302
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13302

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14394
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14394

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999010
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999010

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999012
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999012

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999013
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999013

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6621
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6621

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7557
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7557

reference_url	https://security.gentoo.org/glsa/202003-65
reference_id	GLSA-202003-65
reference_type
scores
url	https://security.gentoo.org/glsa/202003-65

fixed_packages

url	pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community
purl	pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/ffmpeg4@3.4.3-r0%3Farch=s390x&distroversion=v3.22&reponame=community

aliases CVE-2018-7557

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-utzv-46dm-myhs

url VCID-w8n7-ebvz-fbdh

vulnerability_id VCID-w8n7-ebvz-fbdh

summary In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information disclosure.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2018-13300

reference_id

reference_type

scores

value	0.0066
scoring_system	epss
scoring_elements	0.7148
published_at	2026-06-04T12:55:00Z

value	0.0066
scoring_system	epss
scoring_elements	0.71524
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2018-13300

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10001
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10001

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12458
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12458

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13300
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13300

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13302
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13302

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14394
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14394

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999010
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999010

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999012
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999012

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999013
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999013

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6621
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6621

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7557
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7557

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	4.4
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

fixed_packages

url	pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community
purl	pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/ffmpeg4@3.4.3-r0%3Farch=s390x&distroversion=v3.22&reponame=community

aliases CVE-2018-13300

risk_score 1.1

exploitability 0.5

weighted_severity 2.2

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w8n7-ebvz-fbdh

url VCID-ysdt-w7xg-zqcw

vulnerability_id VCID-ysdt-w7xg-zqcw

summary In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly unspecified other impact.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2018-13302

reference_id

reference_type

scores

value	0.00881
scoring_system	epss
scoring_elements	0.7572
published_at	2026-06-04T12:55:00Z

value	0.00881
scoring_system	epss
scoring_elements	0.75747
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2018-13302

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10001
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10001

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12458
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12458

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13300
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13300

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13302
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13302

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14394
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14394

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999010
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999010

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999012
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999012

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999013
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999013

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6621
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6621

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7557
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7557

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	5.3
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

fixed_packages

url	pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community
purl	pkg:apk/alpine/ffmpeg4@3.4.3-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/ffmpeg4@3.4.3-r0%3Farch=s390x&distroversion=v3.22&reponame=community

aliases CVE-2018-13302

risk_score 1.3

exploitability 0.5

weighted_severity 2.6

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ysdt-w7xg-zqcw

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/ffmpeg4@3.4.3-r0%3Farch=s390x&distroversion=v3.22&reponame=community

Package Instance