Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:apk/alpine/znc@1.7.1-r1?arch=armhf&distroversion=v3.8&reponame=main

Type apk

Namespace alpine

Name znc

Version 1.7.1-r1

Qualifiers

arch	armhf
distroversion	v3.8
reponame	main

Subpath

Is_vulnerable false

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-f76y-4atq-t3hb

vulnerability_id VCID-f76y-4atq-t3hb

summary Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2019-12816

reference_id

reference_type

scores

value	0.03681
scoring_system	epss
scoring_elements	0.88129
published_at	2026-06-04T12:55:00Z

value	0.03681
scoring_system	epss
scoring_elements	0.88149
published_at	2026-06-05T12:55:00Z

value	0.03681
scoring_system	epss
scoring_elements	0.88153
published_at	2026-06-06T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2019-12816

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12816
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12816

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9917
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9917

reference_url	https://security.gentoo.org/glsa/201908-15
reference_id	GLSA-201908-15
reference_type
scores
url	https://security.gentoo.org/glsa/201908-15

reference_url	https://usn.ubuntu.com/4044-1/
reference_id	USN-4044-1
reference_type
scores
url	https://usn.ubuntu.com/4044-1/

fixed_packages

url	pkg:apk/alpine/znc@1.7.1-r1?arch=armhf&distroversion=v3.8&reponame=main
purl	pkg:apk/alpine/znc@1.7.1-r1?arch=armhf&distroversion=v3.8&reponame=main
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/znc@1.7.1-r1%3Farch=armhf&distroversion=v3.8&reponame=main

aliases CVE-2019-12816

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f76y-4atq-t3hb

url VCID-hgkt-dy32-aqc5

vulnerability_id VCID-hgkt-dy32-aqc5

summary ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2019-9917

reference_id

reference_type

scores

value	0.01667
scoring_system	epss
scoring_elements	0.82434
published_at	2026-06-04T12:55:00Z

value	0.01667
scoring_system	epss
scoring_elements	0.82463
published_at	2026-06-05T12:55:00Z

value	0.01667
scoring_system	epss
scoring_elements	0.82462
published_at	2026-06-06T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2019-9917

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12816
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12816

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9917
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9917

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=925285
reference_id	925285
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=925285

reference_url	https://usn.ubuntu.com/3950-1/
reference_id	USN-3950-1
reference_type
scores
url	https://usn.ubuntu.com/3950-1/

fixed_packages

url	pkg:apk/alpine/znc@1.7.1-r1?arch=armhf&distroversion=v3.8&reponame=main
purl	pkg:apk/alpine/znc@1.7.1-r1?arch=armhf&distroversion=v3.8&reponame=main
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/znc@1.7.1-r1%3Farch=armhf&distroversion=v3.8&reponame=main

aliases CVE-2019-9917

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hgkt-dy32-aqc5

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/znc@1.7.1-r1%3Farch=armhf&distroversion=v3.8&reponame=main

Package Instance