Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/514880?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/514880?format=api", "purl": "pkg:cargo/hivex@0.2.0", "type": "cargo", "namespace": "", "name": "hivex", "version": "0.2.0", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "0.2.1", "latest_non_vulnerable_version": "0.2.1", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/90696?format=api", "vulnerability_id": "VCID-5xn6-mwz6-aydc", "summary": "Hive has Double-free and Use After Free Vulnerabilities\n`Drop` implementation for `Hive` did perform free, but so did `Hive::close`, which, at the end of the scope performed `Drop`, therefore triggering double-free.\n\nAdditionally, function `Hive::from_handle` was not marked as unsafe, making it, in combination with `as_handle` easy to clone and trigger double-free in safe code or triggering UB when using invalid pointer.", "references": [ { "reference_url": "https://codeberg.org/1millibyte/toolsnt/commit/f4c7a0d1fc4a08ce40bb76e447a69a6f383a916e", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://codeberg.org/1millibyte/toolsnt/commit/f4c7a0d1fc4a08ce40bb76e447a69a6f383a916e" }, { "reference_url": "https://codeberg.org/1millibyte/toolsnt/issues/18", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://codeberg.org/1millibyte/toolsnt/issues/18" }, { "reference_url": "https://docs.rs/crate/hivex", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.rs/crate/hivex" }, { "reference_url": "https://docs.rs/crate/hivex/0.2.1/source", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.rs/crate/hivex/0.2.1/source" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2026-0029.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2026-0029.html" }, { "reference_url": "https://github.com/advisories/GHSA-j8cj-hw74-64jv", "reference_id": "GHSA-j8cj-hw74-64jv", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-j8cj-hw74-64jv" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/514881?format=api", "purl": "pkg:cargo/hivex@0.2.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:cargo/hivex@0.2.1" } ], "aliases": [ "GHSA-j8cj-hw74-64jv" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5xn6-mwz6-aydc" } ], "fixing_vulnerabilities": [], "risk_score": "3.1", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:cargo/hivex@0.2.0" }