Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/52903?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/52903?format=api", "purl": "pkg:composer/adodb/adodb-php@5.10.0", "type": "composer", "namespace": "adodb", "name": "adodb-php", "version": "5.10.0", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "5.20.7", "latest_non_vulnerable_version": "5.21.0", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38220?format=api", "vulnerability_id": "VCID-s36b-vnzu-f7gs", "summary": "SQL Injection\nThe `qstr` method in the PDO driver in the ADOdb Library for PHP might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.", "references": [ { "reference_url": "https://github.com/ADOdb/ADOdb/blob/v5.20.7/docs/changelog.md", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ADOdb/ADOdb/blob/v5.20.7/docs/changelog.md" }, { "reference_url": "https://github.com/ADOdb/ADOdb/commit/bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ADOdb/ADOdb/commit/bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7405", "reference_id": "CVE-2016-7405", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7405" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52905?format=api", "purl": "pkg:composer/adodb/adodb-php@5.20.7", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/adodb/adodb-php@5.20.7" } ], "aliases": [ "CVE-2016-7405" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s36b-vnzu-f7gs" } ], "fixing_vulnerabilities": [], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/adodb/adodb-php@5.10.0" }