Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/36701?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/36701?format=api", "purl": "pkg:deb/debian/dar@2.7.8-2?distro=trixie", "type": "deb", "namespace": "debian", "name": "dar", "version": "2.7.8-2", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "2.7.17-1", "latest_non_vulnerable_version": "2.8.3-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200124?format=api", "vulnerability_id": "VCID-1ntc-urq5-gqfw", "summary": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2096.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2096.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2005-2096", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.43032", "scoring_system": "epss", "scoring_elements": "0.97577", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.43032", "scoring_system": "epss", "scoring_elements": "0.97586", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2005-2096" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2096", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2096" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=317133", "reference_id": "317133", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=317133" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=317523", "reference_id": "317523", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=317523" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=317966", "reference_id": "317966", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=317966" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=317967", "reference_id": "317967", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=317967" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=317968", "reference_id": "317968", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=317968" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318014", "reference_id": "318014", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318014" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318091", "reference_id": "318091", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318091" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318099", "reference_id": "318099", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318099" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318100", "reference_id": "318100", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318100" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318246", "reference_id": "318246", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318246" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332236", "reference_id": "332236", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332236" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=430650", "reference_id": "430650", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430650" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2005:569", "reference_id": "RHSA-2005:569", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2005:569" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2008:0264", "reference_id": "RHSA-2008:0264", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2008:0264" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2008:0525", "reference_id": "RHSA-2008:0525", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2008:0525" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2008:0629", "reference_id": "RHSA-2008:0629", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2008:0629" }, { "reference_url": "https://usn.ubuntu.com/148-1/", "reference_id": "USN-148-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/148-1/" }, { "reference_url": "https://usn.ubuntu.com/151-2/", "reference_id": "USN-151-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/151-2/" }, { "reference_url": "https://usn.ubuntu.com/151-3/", "reference_id": "USN-151-3", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/151-3/" }, { "reference_url": "https://usn.ubuntu.com/151-4/", "reference_id": "USN-151-4", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/151-4/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/36702?format=api", "purl": "pkg:deb/debian/dar@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/dar@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/36703?format=api", "purl": "pkg:deb/debian/dar@2.6.13-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/dar@2.6.13-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/36701?format=api", "purl": "pkg:deb/debian/dar@2.7.8-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/dar@2.7.8-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/36706?format=api", "purl": "pkg:deb/debian/dar@2.7.17-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/dar@2.7.17-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/36704?format=api", "purl": "pkg:deb/debian/dar@2.8.3-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/dar@2.8.3-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2005-2096" ], "risk_score": 0.2, "exploitability": "0.5", "weighted_severity": "0.4", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1ntc-urq5-gqfw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200724?format=api", "vulnerability_id": "VCID-zvgt-wysv-5kap", "summary": "The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by (1) discarding random bits by the blowfish::make_ivec function in libdar/crypto.cpp that results in predictable and repeating IV values, and (2) direct use of a password for keying, which makes it easier for context-dependent attackers to decrypt files.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-3528", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00535", "scoring_system": "epss", "scoring_elements": "0.67892", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00535", "scoring_system": "epss", "scoring_elements": "0.6798", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-3528" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3528", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3528" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=425335", "reference_id": "425335", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=425335" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/36708?format=api", "purl": "pkg:deb/debian/dar@2.3.3-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/dar@2.3.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/36703?format=api", "purl": "pkg:deb/debian/dar@2.6.13-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/dar@2.6.13-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/36701?format=api", "purl": "pkg:deb/debian/dar@2.7.8-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/dar@2.7.8-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/36706?format=api", "purl": "pkg:deb/debian/dar@2.7.17-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/dar@2.7.17-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/36704?format=api", "purl": "pkg:deb/debian/dar@2.8.3-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/dar@2.8.3-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2007-3528" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zvgt-wysv-5kap" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/dar@2.7.8-2%3Fdistro=trixie" }