GET

Package Instance

Lookup for vulnerable packages by Package URL.

GET /api/packages/517605?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/517605?format=api",
    "purl": "pkg:deb/debian/miniupnpd@1.8.20140523-4.1%2Bdeb9u2",
    "type": "deb",
    "namespace": "debian",
    "name": "miniupnpd",
    "version": "1.8.20140523-4.1+deb9u2",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": "2.1-6",
    "latest_non_vulnerable_version": "2.3.10-1",
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/93238?format=api",
            "vulnerability_id": "VCID-2rq5-ae6x-u7b7",
            "summary": "Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000494",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0008",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23732",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.0008",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23827",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.0008",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23812",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.0008",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23766",
                            "published_at": "2026-06-07T12:55:00Z"
                        },
                        {
                            "value": "0.0008",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23712",
                            "published_at": "2026-06-08T12:55:00Z"
                        },
                        {
                            "value": "0.0008",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23717",
                            "published_at": "2026-06-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000494"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000494",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000494"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887129",
                    "reference_id": "887129",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887129"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3562-1/",
                    "reference_id": "USN-3562-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3562-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/517606?format=api",
                    "purl": "pkg:deb/debian/miniupnpd@2.1-6",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/miniupnpd@2.1-6"
                }
            ],
            "aliases": [
                "CVE-2017-1000494"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2rq5-ae6x-u7b7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/93249?format=api",
            "vulnerability_id": "VCID-8jdf-gcsm-ckc2",
            "summary": "A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-12111",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01158",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78913",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.01158",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78939",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.01158",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78946",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.01158",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78936",
                            "published_at": "2026-06-07T12:55:00Z"
                        },
                        {
                            "value": "0.01158",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78924",
                            "published_at": "2026-06-08T12:55:00Z"
                        },
                        {
                            "value": "0.01158",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78942",
                            "published_at": "2026-06-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-12111"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12111",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12111"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930050",
                    "reference_id": "930050",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930050"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4542-1/",
                    "reference_id": "USN-4542-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4542-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/517606?format=api",
                    "purl": "pkg:deb/debian/miniupnpd@2.1-6",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/miniupnpd@2.1-6"
                }
            ],
            "aliases": [
                "CVE-2019-12111"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8jdf-gcsm-ckc2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/93247?format=api",
            "vulnerability_id": "VCID-f1pt-mb5b-pbf2",
            "summary": "A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-12109",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00533",
                            "scoring_system": "epss",
                            "scoring_elements": "0.67674",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.00533",
                            "scoring_system": "epss",
                            "scoring_elements": "0.67715",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.00533",
                            "scoring_system": "epss",
                            "scoring_elements": "0.67722",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.00533",
                            "scoring_system": "epss",
                            "scoring_elements": "0.67712",
                            "published_at": "2026-06-09T12:55:00Z"
                        },
                        {
                            "value": "0.00533",
                            "scoring_system": "epss",
                            "scoring_elements": "0.67696",
                            "published_at": "2026-06-08T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-12109"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12109",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12109"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930050",
                    "reference_id": "930050",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930050"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4542-1/",
                    "reference_id": "USN-4542-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4542-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/517606?format=api",
                    "purl": "pkg:deb/debian/miniupnpd@2.1-6",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/miniupnpd@2.1-6"
                }
            ],
            "aliases": [
                "CVE-2019-12109"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-f1pt-mb5b-pbf2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/93246?format=api",
            "vulnerability_id": "VCID-g17d-7n9p-mbd1",
            "summary": "A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_port.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-12108",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00533",
                            "scoring_system": "epss",
                            "scoring_elements": "0.67674",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.00533",
                            "scoring_system": "epss",
                            "scoring_elements": "0.67715",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.00533",
                            "scoring_system": "epss",
                            "scoring_elements": "0.67722",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.00533",
                            "scoring_system": "epss",
                            "scoring_elements": "0.67712",
                            "published_at": "2026-06-09T12:55:00Z"
                        },
                        {
                            "value": "0.00533",
                            "scoring_system": "epss",
                            "scoring_elements": "0.67696",
                            "published_at": "2026-06-08T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-12108"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12108",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12108"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930050",
                    "reference_id": "930050",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930050"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4542-1/",
                    "reference_id": "USN-4542-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4542-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/517606?format=api",
                    "purl": "pkg:deb/debian/miniupnpd@2.1-6",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/miniupnpd@2.1-6"
                }
            ],
            "aliases": [
                "CVE-2019-12108"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-g17d-7n9p-mbd1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/93248?format=api",
            "vulnerability_id": "VCID-qua7-hrtw-3kdy",
            "summary": "An AddPortMapping Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in upnpredirect.c.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-12110",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00595",
                            "scoring_system": "epss",
                            "scoring_elements": "0.69678",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.00595",
                            "scoring_system": "epss",
                            "scoring_elements": "0.69718",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.00595",
                            "scoring_system": "epss",
                            "scoring_elements": "0.69726",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.00595",
                            "scoring_system": "epss",
                            "scoring_elements": "0.69716",
                            "published_at": "2026-06-07T12:55:00Z"
                        },
                        {
                            "value": "0.00595",
                            "scoring_system": "epss",
                            "scoring_elements": "0.69705",
                            "published_at": "2026-06-08T12:55:00Z"
                        },
                        {
                            "value": "0.00595",
                            "scoring_system": "epss",
                            "scoring_elements": "0.69727",
                            "published_at": "2026-06-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-12110"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12110",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12110"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930050",
                    "reference_id": "930050",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930050"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4542-1/",
                    "reference_id": "USN-4542-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4542-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/517606?format=api",
                    "purl": "pkg:deb/debian/miniupnpd@2.1-6",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/miniupnpd@2.1-6"
                }
            ],
            "aliases": [
                "CVE-2019-12110"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qua7-hrtw-3kdy"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/93245?format=api",
            "vulnerability_id": "VCID-vgar-jq34-67gh",
            "summary": "The upnp_event_prepare function in upnpevents.c in MiniUPnP MiniUPnPd through 2.1 allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-12107",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00367",
                            "scoring_system": "epss",
                            "scoring_elements": "0.5893",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.00367",
                            "scoring_system": "epss",
                            "scoring_elements": "0.58978",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.00367",
                            "scoring_system": "epss",
                            "scoring_elements": "0.58982",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.00367",
                            "scoring_system": "epss",
                            "scoring_elements": "0.58974",
                            "published_at": "2026-06-09T12:55:00Z"
                        },
                        {
                            "value": "0.00367",
                            "scoring_system": "epss",
                            "scoring_elements": "0.58959",
                            "published_at": "2026-06-08T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-12107"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12107",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12107"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930050",
                    "reference_id": "930050",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930050"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4542-1/",
                    "reference_id": "USN-4542-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4542-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/517606?format=api",
                    "purl": "pkg:deb/debian/miniupnpd@2.1-6",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/miniupnpd@2.1-6"
                }
            ],
            "aliases": [
                "CVE-2019-12107"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vgar-jq34-67gh"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/miniupnpd@1.8.20140523-4.1%252Bdeb9u2"
}