Lookup for vulnerable packages by Package URL.

GET /api/packages/346025?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/346025?format=api",
    "purl": "pkg:apk/alpine/privoxy@3.0.29-r0?arch=s390x&distroversion=v3.14&reponame=main",
    "type": "apk",
    "namespace": "alpine",
    "name": "privoxy",
    "version": "3.0.29-r0",
    "qualifiers": {
        "arch": "s390x",
        "distroversion": "v3.14",
        "reponame": "main"
    },
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "3.0.31-r0",
    "latest_non_vulnerable_version": "3.0.33-r0",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/98617?format=api",
            "vulnerability_id": "VCID-j95h-cnan-1ya5",
            "summary": "A flaw was found in Privoxy in versions before 3.0.29. Memory leak in the show-status CGI handler when no filter files are configured can lead to a system crash.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20210",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72329",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72371",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72377",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72357",
                            "published_at": "2026-06-07T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72342",
                            "published_at": "2026-06-08T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72367",
                            "published_at": "2026-06-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20210"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20210",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20210"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202107-16",
                    "reference_id": "GLSA-202107-16",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202107-16"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4886-1/",
                    "reference_id": "USN-4886-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4886-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/346025?format=api",
                    "purl": "pkg:apk/alpine/privoxy@3.0.29-r0?arch=s390x&distroversion=v3.14&reponame=main",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/privoxy@3.0.29-r0%3Farch=s390x&distroversion=v3.14&reponame=main"
                }
            ],
            "aliases": [
                "CVE-2021-20210"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j95h-cnan-1ya5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/98619?format=api",
            "vulnerability_id": "VCID-qb2v-vd58-pqee",
            "summary": "A flaw was found in Privoxy in versions before 3.0.29. Memory leak when client tags are active can cause a system crash.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20211",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72329",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72371",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72377",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72357",
                            "published_at": "2026-06-07T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72342",
                            "published_at": "2026-06-08T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72367",
                            "published_at": "2026-06-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20211"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20211",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20211"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202107-16",
                    "reference_id": "GLSA-202107-16",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202107-16"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4886-1/",
                    "reference_id": "USN-4886-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4886-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/346025?format=api",
                    "purl": "pkg:apk/alpine/privoxy@3.0.29-r0?arch=s390x&distroversion=v3.14&reponame=main",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/privoxy@3.0.29-r0%3Farch=s390x&distroversion=v3.14&reponame=main"
                }
            ],
            "aliases": [
                "CVE-2021-20211"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qb2v-vd58-pqee"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/98620?format=api",
            "vulnerability_id": "VCID-srtq-3ajb-5qdz",
            "summary": "A flaw was found in Privoxy in versions before 3.0.29. Memory leak if multiple filters are executed and the last one is skipped due to a pcre error leading to a system crash.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20212",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72329",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72371",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72377",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72357",
                            "published_at": "2026-06-07T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72342",
                            "published_at": "2026-06-08T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72367",
                            "published_at": "2026-06-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20212"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20212",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20212"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202107-16",
                    "reference_id": "GLSA-202107-16",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202107-16"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4886-1/",
                    "reference_id": "USN-4886-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4886-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/346025?format=api",
                    "purl": "pkg:apk/alpine/privoxy@3.0.29-r0?arch=s390x&distroversion=v3.14&reponame=main",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/privoxy@3.0.29-r0%3Farch=s390x&distroversion=v3.14&reponame=main"
                }
            ],
            "aliases": [
                "CVE-2021-20212"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-srtq-3ajb-5qdz"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/98621?format=api",
            "vulnerability_id": "VCID-vtug-2hhh-9qaj",
            "summary": "A flaw was found in Privoxy in versions before 3.0.29. Dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests was enabled, Privoxy failed to get the request destination from the Host header and a memory allocation failed.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20213",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00803",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74461",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.00803",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74493",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.00803",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74499",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.00803",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74487",
                            "published_at": "2026-06-07T12:55:00Z"
                        },
                        {
                            "value": "0.00803",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7447",
                            "published_at": "2026-06-08T12:55:00Z"
                        },
                        {
                            "value": "0.00803",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74496",
                            "published_at": "2026-06-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20213"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20213",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20213"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202107-16",
                    "reference_id": "GLSA-202107-16",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202107-16"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4886-1/",
                    "reference_id": "USN-4886-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4886-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/346025?format=api",
                    "purl": "pkg:apk/alpine/privoxy@3.0.29-r0?arch=s390x&distroversion=v3.14&reponame=main",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/privoxy@3.0.29-r0%3Farch=s390x&distroversion=v3.14&reponame=main"
                }
            ],
            "aliases": [
                "CVE-2021-20213"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vtug-2hhh-9qaj"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/98623?format=api",
            "vulnerability_id": "VCID-xpb3-hwac-kuf1",
            "summary": "A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the show-status CGI handler when memory allocations fail can lead to a system crash.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20215",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72329",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72371",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72377",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72357",
                            "published_at": "2026-06-07T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72342",
                            "published_at": "2026-06-08T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72367",
                            "published_at": "2026-06-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20215"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20215",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20215"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202107-16",
                    "reference_id": "GLSA-202107-16",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202107-16"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4886-1/",
                    "reference_id": "USN-4886-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4886-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/346025?format=api",
                    "purl": "pkg:apk/alpine/privoxy@3.0.29-r0?arch=s390x&distroversion=v3.14&reponame=main",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/privoxy@3.0.29-r0%3Farch=s390x&distroversion=v3.14&reponame=main"
                }
            ],
            "aliases": [
                "CVE-2021-20215"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xpb3-hwac-kuf1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/98622?format=api",
            "vulnerability_id": "VCID-yydj-c83s-a3bc",
            "summary": "A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocations fail can lead to a system crash.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20214",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72329",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72371",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72377",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72357",
                            "published_at": "2026-06-07T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72342",
                            "published_at": "2026-06-08T12:55:00Z"
                        },
                        {
                            "value": "0.00697",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72367",
                            "published_at": "2026-06-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20214"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20214",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20214"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202107-16",
                    "reference_id": "GLSA-202107-16",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202107-16"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4886-1/",
                    "reference_id": "USN-4886-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4886-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/346025?format=api",
                    "purl": "pkg:apk/alpine/privoxy@3.0.29-r0?arch=s390x&distroversion=v3.14&reponame=main",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/privoxy@3.0.29-r0%3Farch=s390x&distroversion=v3.14&reponame=main"
                }
            ],
            "aliases": [
                "CVE-2021-20214"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yydj-c83s-a3bc"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/privoxy@3.0.29-r0%3Farch=s390x&distroversion=v3.14&reponame=main"
}