Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/php7@7.3.17-r0?arch=x86_64&distroversion=v3.13&reponame=community
Typeapk
Namespacealpine
Namephp7
Version7.3.17-r0
Qualifiers
arch x86_64
distroversion v3.13
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version7.3.18-r0
Latest_non_vulnerable_version7.4.26-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-kavg-nxpu-b3ft
vulnerability_id VCID-kavg-nxpu-b3ft
summary In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7067.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7067.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-7067
reference_id
reference_type
scores
0
value 0.08994
scoring_system epss
scoring_elements 0.92764
published_at 2026-06-08T12:55:00Z
1
value 0.08994
scoring_system epss
scoring_elements 0.92776
published_at 2026-06-05T12:55:00Z
2
value 0.08994
scoring_system epss
scoring_elements 0.92779
published_at 2026-06-09T12:55:00Z
3
value 0.08994
scoring_system epss
scoring_elements 0.92771
published_at 2026-06-06T12:55:00Z
4
value 0.08994
scoring_system epss
scoring_elements 0.92767
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-7067
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11048
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11048
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7062
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7062
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7063
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7063
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7064
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7064
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7065
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7065
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7066
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7066
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7067
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7067
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1827653
reference_id 1827653
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1827653
fixed_packages
0
url pkg:apk/alpine/php7@7.3.17-r0?arch=x86_64&distroversion=v3.13&reponame=community
purl pkg:apk/alpine/php7@7.3.17-r0?arch=x86_64&distroversion=v3.13&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/php7@7.3.17-r0%3Farch=x86_64&distroversion=v3.13&reponame=community
aliases CVE-2020-7067
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kavg-nxpu-b3ft
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/php7@7.3.17-r0%3Farch=x86_64&distroversion=v3.13&reponame=community