Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:apk/alpine/gst-plugins-ugly@1.10.4-r0?arch=armhf&distroversion=v3.7&reponame=main

Type apk

Namespace alpine

Name gst-plugins-ugly

Version 1.10.4-r0

Qualifiers

arch	armhf
distroversion	v3.7
reponame	main

Subpath

Is_vulnerable false

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-19cb-ug26-6yge

vulnerability_id VCID-19cb-ug26-6yge

summary

Multiple vulnerabilities have been found in various GStreamer
    plug-ins, the worst of which could lead to the execution of arbitrary code.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2017-5847

reference_id

reference_type

scores

value	0.03677
scoring_system	epss
scoring_elements	0.8818
published_at	2026-06-11T12:55:00Z

value	0.03677
scoring_system	epss
scoring_elements	0.8822
published_at	2026-06-12T12:55:00Z

value	0.03677
scoring_system	epss
scoring_elements	0.88226
published_at	2026-06-13T12:55:00Z

value	0.03677
scoring_system	epss
scoring_elements	0.88225
published_at	2026-06-14T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2017-5847

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5846
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5846

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5847
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5847

reference_url	https://security.archlinux.org/ASA-201702-6
reference_id	ASA-201702-6
reference_type
scores
url	https://security.archlinux.org/ASA-201702-6

reference_url

https://security.archlinux.org/AVG-166

reference_id

AVG-166

reference_type

scores

value	Low
scoring_system	archlinux
scoring_elements

url

https://security.archlinux.org/AVG-166

reference_url	https://security.gentoo.org/glsa/201705-10
reference_id	GLSA-201705-10
reference_type
scores
url	https://security.gentoo.org/glsa/201705-10

fixed_packages

url	pkg:apk/alpine/gst-plugins-ugly@1.10.4-r0?arch=armhf&distroversion=v3.7&reponame=main
purl	pkg:apk/alpine/gst-plugins-ugly@1.10.4-r0?arch=armhf&distroversion=v3.7&reponame=main
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-ugly@1.10.4-r0%3Farch=armhf&distroversion=v3.7&reponame=main

aliases CVE-2017-5847

risk_score 1.4

exploitability 0.5

weighted_severity 2.7

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-19cb-ug26-6yge

url VCID-51js-dqfw-n3fd

vulnerability_id VCID-51js-dqfw-n3fd

summary

Multiple vulnerabilities have been found in various GStreamer
    plug-ins, the worst of which could lead to the execution of arbitrary code.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2017-5846

reference_id

reference_type

scores

value	0.00587
scoring_system	epss
scoring_elements	0.69593
published_at	2026-06-11T12:55:00Z

value	0.00587
scoring_system	epss
scoring_elements	0.69683
published_at	2026-06-12T12:55:00Z

value	0.00587
scoring_system	epss
scoring_elements	0.69695
published_at	2026-06-13T12:55:00Z

value	0.00587
scoring_system	epss
scoring_elements	0.69693
published_at	2026-06-14T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2017-5846

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5846
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5846

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5847
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5847

reference_url	https://security.archlinux.org/ASA-201702-6
reference_id	ASA-201702-6
reference_type
scores
url	https://security.archlinux.org/ASA-201702-6

reference_url

https://security.archlinux.org/AVG-166

reference_id

AVG-166

reference_type

scores

value	Low
scoring_system	archlinux
scoring_elements

url

https://security.archlinux.org/AVG-166

reference_url	https://security.gentoo.org/glsa/201705-10
reference_id	GLSA-201705-10
reference_type
scores
url	https://security.gentoo.org/glsa/201705-10

fixed_packages

url	pkg:apk/alpine/gst-plugins-ugly@1.10.4-r0?arch=armhf&distroversion=v3.7&reponame=main
purl	pkg:apk/alpine/gst-plugins-ugly@1.10.4-r0?arch=armhf&distroversion=v3.7&reponame=main
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-ugly@1.10.4-r0%3Farch=armhf&distroversion=v3.7&reponame=main

aliases CVE-2017-5846

risk_score 1.4

exploitability 0.5

weighted_severity 2.7

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-51js-dqfw-n3fd

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-ugly@1.10.4-r0%3Farch=armhf&distroversion=v3.7&reponame=main

Package Instance