Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/55039?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/55039?format=api", "purl": "pkg:gem/rugged@0.27.4", "type": "gem", "namespace": "", "name": "rugged", "version": "0.27.4", "qualifiers": {}, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "1.4.5", "latest_non_vulnerable_version": "1.5.0.1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/12892?format=api", "vulnerability_id": "VCID-8y4k-3zqe-2qhq", "summary": "Out-of-bounds Read\nIn the library libgit2, which is used by pygit2, a remote attacker can send a crafted smart-protocol `ng` packet that lacks a `\\0` byte to trigger an out-of-bounds read leading to a DoS.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-15501", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02924", "scoring_system": "epss", "scoring_elements": "0.86651", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-15501" }, { "reference_url": "https://bugzilla.suse.com/show_bug.cgi?id=1104641", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.suse.com/show_bug.cgi?id=1104641" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15501", "reference_id": "CVE-2018-15501", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15501" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/55364?format=api", "purl": "pkg:gem/rugged@0.26.6", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.26.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/55039?format=api", "purl": "pkg:gem/rugged@0.27.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.27.4" } ], "aliases": [ "CVE-2018-15501" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8y4k-3zqe-2qhq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/12774?format=api", "vulnerability_id": "VCID-sh5r-zhae-7qau", "summary": "Out-of-bounds Read\nThe libgit2 library, which is used by pygit2, is vulnerable to an integer overflow which leads to an out-of-bound read. An attacker may use this flaw to leak memory addresses or cause a Denial of Service.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-10887", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00392", "scoring_system": "epss", "scoring_elements": "0.60497", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-10887" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1598021", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1598021" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903509", "reference_id": "903509", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903509" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10887", "reference_id": "CVE-2018-10887", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10887" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/55039?format=api", "purl": "pkg:gem/rugged@0.27.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.27.4" } ], "aliases": [ "CVE-2018-10887" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sh5r-zhae-7qau" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/12773?format=api", "vulnerability_id": "VCID-vqs6-suqc-ybc7", "summary": "Out-of-bounds Read\nA flaw was found in libgit2 which is wrapped by the rugged gem. A missing check\nin git_delta_apply function in `delta.c` file, may lead to an out-of-bound read while reading a binary delta file. An attacker may use this flaw to cause a Denial of Service.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-10888", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0062", "scoring_system": "epss", "scoring_elements": "0.70373", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-10888" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1598024", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1598024" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903508", "reference_id": "903508", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903508" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10888", "reference_id": "CVE-2018-10888", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10888" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/55039?format=api", "purl": "pkg:gem/rugged@0.27.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.27.4" } ], "aliases": [ "CVE-2018-10888" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vqs6-suqc-ybc7" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.27.4" }