Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/424149?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/424149?format=api", "purl": "pkg:apk/alpine/gitea@1.11.2-r0?arch=x86_64&distroversion=v3.18&reponame=community", "type": "apk", "namespace": "alpine", "name": "gitea", "version": "1.11.2-r0", "qualifiers": { "arch": "x86_64", "distroversion": "v3.18", "reponame": "community" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "1.13.2-r0", "latest_non_vulnerable_version": "1.17.3-r0", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/109867?format=api", "vulnerability_id": "VCID-xnkc-gh8h-v3f1", "summary": "Capture-replay in Gitea\nGitea is a project to help users set up a self-hosted Git service. Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. This could allow a remote malicious user to execute arbitrary code.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-45327", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02283", "scoring_system": "epss", "scoring_elements": "0.85017", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.02283", "scoring_system": "epss", "scoring_elements": "0.85002", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.02283", "scoring_system": "epss", "scoring_elements": "0.85012", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.02283", "scoring_system": "epss", "scoring_elements": "0.85013", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02283", "scoring_system": "epss", "scoring_elements": "0.84989", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-45327" }, { "reference_url": "https://blog.gitea.io/2020/03/gitea-1.11.2-is-released", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://blog.gitea.io/2020/03/gitea-1.11.2-is-released" }, { "reference_url": "https://github.com/go-gitea/gitea", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/go-gitea/gitea" }, { "reference_url": "https://github.com/go-gitea/gitea/commit/4cb18601ff33dda5edb47d5b452cc8f2dc39dd67", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/go-gitea/gitea/commit/4cb18601ff33dda5edb47d5b452cc8f2dc39dd67" }, { "reference_url": "https://github.com/go-gitea/gitea/commit/6f5656ab0ebec03fe63898208dabc802c4be46ab", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/go-gitea/gitea/commit/6f5656ab0ebec03fe63898208dabc802c4be46ab" }, { "reference_url": "https://github.com/go-gitea/gitea/commit/ed664a9e1dae4d4660e60c981173bbc5102e69ea", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/go-gitea/gitea/commit/ed664a9e1dae4d4660e60c981173bbc5102e69ea" }, { "reference_url": "https://github.com/go-gitea/gitea/pull/10462", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/go-gitea/gitea/pull/10462" }, { "reference_url": "https://github.com/go-gitea/gitea/pull/10465", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/go-gitea/gitea/pull/10465" }, { "reference_url": "https://github.com/go-gitea/gitea/pull/10582", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/go-gitea/gitea/pull/10582" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45327", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45327" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/424149?format=api", "purl": "pkg:apk/alpine/gitea@1.11.2-r0?arch=x86_64&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gitea@1.11.2-r0%3Farch=x86_64&distroversion=v3.18&reponame=community" } ], "aliases": [ "CVE-2021-45327", "GHSA-jrpg-35hw-m4p9" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xnkc-gh8h-v3f1" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gitea@1.11.2-r0%3Farch=x86_64&distroversion=v3.18&reponame=community" }