Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/4492?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/4492?format=api", "purl": "pkg:ebuild/net-mail/tnef@1.4.15", "type": "ebuild", "namespace": "net-mail", "name": "tnef", "version": "1.4.15", "qualifiers": {}, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/180061?format=api", "vulnerability_id": "VCID-677f-5ny3-1uc1", "summary": "Multiple vulnerabilities have been found in TNEF, the worst of\n which allows remote attackers to cause a Denial of Service condition.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6307", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00443", "scoring_system": "epss", "scoring_elements": "0.6377", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00443", "scoring_system": "epss", "scoring_elements": "0.63872", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6307" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6307", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6307" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6308", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6308" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6309", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6309" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6310", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6310" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856117", "reference_id": "856117", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856117" }, { "reference_url": "https://security.gentoo.org/glsa/201708-02", "reference_id": "GLSA-201708-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201708-02" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4492?format=api", "purl": "pkg:ebuild/net-mail/tnef@1.4.15", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/net-mail/tnef@1.4.15" } ], "aliases": [ "CVE-2017-6307" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-677f-5ny3-1uc1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/180065?format=api", "vulnerability_id": "VCID-7jbr-nr48-8yhz", "summary": "Multiple vulnerabilities have been found in TNEF, the worst of\n which allows remote attackers to cause a Denial of Service condition.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-8911", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44534", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44686", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-8911" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8911", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8911" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862442", "reference_id": "862442", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862442" }, { "reference_url": "https://security.gentoo.org/glsa/201708-02", "reference_id": "GLSA-201708-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201708-02" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4492?format=api", "purl": "pkg:ebuild/net-mail/tnef@1.4.15", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/net-mail/tnef@1.4.15" } ], "aliases": [ "CVE-2017-8911" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7jbr-nr48-8yhz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/180064?format=api", "vulnerability_id": "VCID-db96-unmy-3ke2", "summary": "Multiple vulnerabilities have been found in TNEF, the worst of\n which allows remote attackers to cause a Denial of Service condition.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6310", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00353", "scoring_system": "epss", "scoring_elements": "0.58069", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00353", "scoring_system": "epss", "scoring_elements": "0.58183", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6310" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6307", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6307" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6308", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6308" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6309", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6309" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6310", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6310" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856117", "reference_id": "856117", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856117" }, { "reference_url": "https://security.gentoo.org/glsa/201708-02", "reference_id": "GLSA-201708-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201708-02" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4492?format=api", "purl": "pkg:ebuild/net-mail/tnef@1.4.15", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/net-mail/tnef@1.4.15" } ], "aliases": [ "CVE-2017-6310" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-db96-unmy-3ke2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/180063?format=api", "vulnerability_id": "VCID-yyv8-xc39-rbg9", "summary": "Multiple vulnerabilities have been found in TNEF, the worst of\n which allows remote attackers to cause a Denial of Service condition.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6309", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00443", "scoring_system": "epss", "scoring_elements": "0.6377", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00443", "scoring_system": "epss", "scoring_elements": "0.63872", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6309" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6307", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6307" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6308", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6308" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6309", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6309" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6310", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6310" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856117", "reference_id": "856117", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856117" }, { "reference_url": "https://security.gentoo.org/glsa/201708-02", "reference_id": "GLSA-201708-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201708-02" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4492?format=api", "purl": "pkg:ebuild/net-mail/tnef@1.4.15", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/net-mail/tnef@1.4.15" } ], "aliases": [ "CVE-2017-6309" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yyv8-xc39-rbg9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/180062?format=api", "vulnerability_id": "VCID-zquh-vpn5-rkez", "summary": "Multiple vulnerabilities have been found in TNEF, the worst of\n which allows remote attackers to cause a Denial of Service condition.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6308", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00404", "scoring_system": "epss", "scoring_elements": "0.61364", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00404", "scoring_system": "epss", "scoring_elements": "0.61468", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6308" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6307", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6307" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6308", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6308" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6309", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6309" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6310", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6310" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856117", "reference_id": "856117", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856117" }, { "reference_url": "https://security.gentoo.org/glsa/201708-02", "reference_id": "GLSA-201708-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201708-02" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4492?format=api", "purl": "pkg:ebuild/net-mail/tnef@1.4.15", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/net-mail/tnef@1.4.15" } ], "aliases": [ "CVE-2017-6308" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zquh-vpn5-rkez" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/net-mail/tnef@1.4.15" }