Lookup for vulnerable packages by Package URL.

GET /api/packages/5585?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/5585?format=api",
    "purl": "pkg:apache/tomcat@3.3.0-a",
    "type": "apache",
    "namespace": "",
    "name": "tomcat",
    "version": "3.3.0-a",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": "4.1.3",
    "latest_non_vulnerable_version": "11.0.22",
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6842?format=api",
            "vulnerability_id": "VCID-3vnr-1343-dqcq",
            "summary": "",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2003-0043",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.03204",
                            "scoring_system": "epss",
                            "scoring_elements": "0.87232",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2003-0043"
                },
                {
                    "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11195",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11195"
                },
                {
                    "reference_url": "https://github.com/apache/tomcat",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/apache/tomcat"
                },
                {
                    "reference_url": "https://web.archive.org/web/20030804165204/http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://web.archive.org/web/20030804165204/http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt"
                },
                {
                    "reference_url": "https://web.archive.org/web/20030810045410/http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://web.archive.org/web/20030810045410/http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a"
                },
                {
                    "reference_url": "https://web.archive.org/web/20030819144200/http://www.ciac.org/ciac/bulletins/n-060.shtml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://web.archive.org/web/20030819144200/http://www.ciac.org/ciac/bulletins/n-060.shtml"
                },
                {
                    "reference_url": "https://web.archive.org/web/20131213024606/http://www.securityfocus.com/bid/6722",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://web.archive.org/web/20131213024606/http://www.securityfocus.com/bid/6722"
                },
                {
                    "reference_url": "https://web.archive.org/web/20140627151430/http://www.securityfocus.com/advisories/5111",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://web.archive.org/web/20140627151430/http://www.securityfocus.com/advisories/5111"
                },
                {
                    "reference_url": "http://www.debian.org/security/2003/dsa-246",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.debian.org/security/2003/dsa-246"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0043",
                    "reference_id": "CVE-2003-0043",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Important",
                            "scoring_system": "apache_tomcat",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0043"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0043",
                    "reference_id": "CVE-2003-0043",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0043"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-cvx5-7vc7-rg77",
                    "reference_id": "GHSA-cvx5-7vc7-rg77",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "cvssv3.1_qr",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/advisories/GHSA-cvx5-7vc7-rg77"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5596?format=api",
                    "purl": "pkg:apache/tomcat@3.3.1-a",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-tujm-z3uf-abde"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.3.1-a"
                }
            ],
            "aliases": [
                "CVE-2003-0043",
                "GHSA-cvx5-7vc7-rg77"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3vnr-1343-dqcq"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6839?format=api",
            "vulnerability_id": "VCID-7gme-bpf9-vuc6",
            "summary": "",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2005-0808",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.1863",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95381",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2005-0808"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0808",
                    "reference_id": "CVE-2005-0808",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Important",
                            "scoring_system": "apache_tomcat",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0808"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2005-0808"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7gme-bpf9-vuc6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6841?format=api",
            "vulnerability_id": "VCID-tujm-z3uf-abde",
            "summary": "",
            "references": [
                {
                    "reference_url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a"
                },
                {
                    "reference_url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/"
                },
                {
                    "reference_url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2003-0044",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.27285",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96488",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2003-0044"
                },
                {
                    "reference_url": "http://secunia.com/advisories/7972",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://secunia.com/advisories/7972"
                },
                {
                    "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11196",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11196"
                },
                {
                    "reference_url": "http://www.ciac.org/ciac/bulletins/n-060.shtml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.ciac.org/ciac/bulletins/n-060.shtml"
                },
                {
                    "reference_url": "http://www.debian.org/security/2003/dsa-246",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.debian.org/security/2003/dsa-246"
                },
                {
                    "reference_url": "http://www.osvdb.org/9203",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.osvdb.org/9203"
                },
                {
                    "reference_url": "http://www.osvdb.org/9204",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.osvdb.org/9204"
                },
                {
                    "reference_url": "http://www.securityfocus.com/advisories/5111",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.securityfocus.com/advisories/5111"
                },
                {
                    "reference_url": "http://www.securityfocus.com/bid/6720",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.securityfocus.com/bid/6720"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0044",
                    "reference_id": "CVE-2003-0044",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Moderate",
                            "scoring_system": "apache_tomcat",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0044"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0044",
                    "reference_id": "CVE-2003-0044",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0044"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-5hgm-qm5m-5vmw",
                    "reference_id": "GHSA-5hgm-qm5m-5vmw",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "cvssv3.1_qr",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/advisories/GHSA-5hgm-qm5m-5vmw"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5586?format=api",
                    "purl": "pkg:apache/tomcat@3.3.2",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-12ue-np81-1bhx"
                        },
                        {
                            "vulnerability": "VCID-22bt-jb44-4qfd"
                        },
                        {
                            "vulnerability": "VCID-7gme-bpf9-vuc6"
                        },
                        {
                            "vulnerability": "VCID-qur2-b72r-nff2"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.3.2"
                }
            ],
            "aliases": [
                "CVE-2003-0044",
                "GHSA-5hgm-qm5m-5vmw"
            ],
            "risk_score": 3.1,
            "exploitability": "0.5",
            "weighted_severity": "6.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tujm-z3uf-abde"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6843?format=api",
            "vulnerability_id": "VCID-u9g2-fqry-5fcu",
            "summary": "",
            "references": [
                {
                    "reference_url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a"
                },
                {
                    "reference_url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/"
                },
                {
                    "reference_url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt"
                },
                {
                    "reference_url": "http://marc.info/?l=bugtraq&m=104394568616290&w=2",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://marc.info/?l=bugtraq&m=104394568616290&w=2"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2003-0042",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.55831",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98133",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2003-0042"
                },
                {
                    "reference_url": "http://secunia.com/advisories/7972",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://secunia.com/advisories/7972"
                },
                {
                    "reference_url": "http://secunia.com/advisories/7977",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://secunia.com/advisories/7977"
                },
                {
                    "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11194",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11194"
                },
                {
                    "reference_url": "https://github.com/apache/tomcat",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/apache/tomcat"
                },
                {
                    "reference_url": "http://www.ciac.org/ciac/bulletins/n-060.shtml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.ciac.org/ciac/bulletins/n-060.shtml"
                },
                {
                    "reference_url": "http://www.debian.org/security/2003/dsa-246",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.debian.org/security/2003/dsa-246"
                },
                {
                    "reference_url": "http://www.securityfocus.com/advisories/5111",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.securityfocus.com/advisories/5111"
                },
                {
                    "reference_url": "http://www.securityfocus.com/bid/6721",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.securityfocus.com/bid/6721"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0042",
                    "reference_id": "CVE-2003-0042",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Important",
                            "scoring_system": "apache_tomcat",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0042"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0042",
                    "reference_id": "CVE-2003-0042",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0042"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/22205.txt",
                    "reference_id": "CVE-2003-0042;OSVDB-12232",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/22205.txt"
                },
                {
                    "reference_url": "https://www.securityfocus.com/bid/6721/info",
                    "reference_id": "CVE-2003-0042;OSVDB-12232",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://www.securityfocus.com/bid/6721/info"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-qfw2-wvrw-mvw4",
                    "reference_id": "GHSA-qfw2-wvrw-mvw4",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "cvssv3.1_qr",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/advisories/GHSA-qfw2-wvrw-mvw4"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5596?format=api",
                    "purl": "pkg:apache/tomcat@3.3.1-a",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-tujm-z3uf-abde"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.3.1-a"
                }
            ],
            "aliases": [
                "CVE-2003-0042",
                "GHSA-qfw2-wvrw-mvw4"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u9g2-fqry-5fcu"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6844?format=api",
            "vulnerability_id": "VCID-ypqb-ap2c-4ycc",
            "summary": "",
            "references": [
                {
                    "reference_url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2003-0045",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01508",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81487",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2003-0045"
                },
                {
                    "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/12102",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/12102"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0045",
                    "reference_id": "CVE-2003-0045",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Important",
                            "scoring_system": "apache_tomcat",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0045"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0045",
                    "reference_id": "CVE-2003-0045",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0045"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-w97x-xfxf-f9xj",
                    "reference_id": "GHSA-w97x-xfxf-f9xj",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "cvssv3.1_qr",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/advisories/GHSA-w97x-xfxf-f9xj"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5598?format=api",
                    "purl": "pkg:apache/tomcat@3.3.1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3vnr-1343-dqcq"
                        },
                        {
                            "vulnerability": "VCID-u9g2-fqry-5fcu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.3.1"
                }
            ],
            "aliases": [
                "CVE-2003-0045",
                "GHSA-w97x-xfxf-f9xj"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ypqb-ap2c-4ycc"
        }
    ],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6845?format=api",
            "vulnerability_id": "VCID-5quq-f4gd-7qc4",
            "summary": "",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2002-2007",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.22609",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9595",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2002-2007"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2007",
                    "reference_id": "CVE-2002-2007",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Moderate",
                            "scoring_system": "apache_tomcat",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2007"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/21490.txt",
                    "reference_id": "CVE-2002-2007;OSVDB-13304",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/21490.txt"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/21491.txt",
                    "reference_id": "CVE-2002-2007;OSVDB-13304",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/21491.txt"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/21492.txt",
                    "reference_id": "CVE-2002-2007;OSVDB-13304",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/21492.txt"
                },
                {
                    "reference_url": "https://www.securityfocus.com/bid/4876/info",
                    "reference_id": "CVE-2002-2007;OSVDB-13304",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://www.securityfocus.com/bid/4876/info"
                },
                {
                    "reference_url": "https://www.securityfocus.com/bid/4877/info",
                    "reference_id": "CVE-2002-2007;OSVDB-13304",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://www.securityfocus.com/bid/4877/info"
                },
                {
                    "reference_url": "https://www.securityfocus.com/bid/4878/info",
                    "reference_id": "CVE-2002-2007;OSVDB-13304",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://www.securityfocus.com/bid/4878/info"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5585?format=api",
                    "purl": "pkg:apache/tomcat@3.3.0-a",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3vnr-1343-dqcq"
                        },
                        {
                            "vulnerability": "VCID-7gme-bpf9-vuc6"
                        },
                        {
                            "vulnerability": "VCID-tujm-z3uf-abde"
                        },
                        {
                            "vulnerability": "VCID-u9g2-fqry-5fcu"
                        },
                        {
                            "vulnerability": "VCID-ypqb-ap2c-4ycc"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.3.0-a"
                }
            ],
            "aliases": [
                "CVE-2002-2007"
            ],
            "risk_score": 3.1,
            "exploitability": "0.5",
            "weighted_severity": "6.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5quq-f4gd-7qc4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6835?format=api",
            "vulnerability_id": "VCID-a1wc-fxfg-kkgv",
            "summary": "",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2002-2006",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.32359",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96926",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2002-2006"
                },
                {
                    "reference_url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@<dev.tomcat.apache.org>",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@<dev.tomcat.apache.org>"
                },
                {
                    "reference_url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@<dev.tomcat.apache.org>",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@<dev.tomcat.apache.org>"
                },
                {
                    "reference_url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@<dev.tomcat.apache.org>",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@<dev.tomcat.apache.org>"
                },
                {
                    "reference_url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1"
                },
                {
                    "reference_url": "https://web.archive.org/web/20020602051837/http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://web.archive.org/web/20020602051837/http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html"
                },
                {
                    "reference_url": "https://web.archive.org/web/20021026082659/http://online.securityfocus.com/bid/4575",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://web.archive.org/web/20021026082659/http://online.securityfocus.com/bid/4575"
                },
                {
                    "reference_url": "https://web.archive.org/web/20030104173336/http://www.iss.net/security_center/static/8932.php",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://web.archive.org/web/20030104173336/http://www.iss.net/security_center/static/8932.php"
                },
                {
                    "reference_url": "http://tomcat.apache.org/security-4.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://tomcat.apache.org/security-4.html"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2006",
                    "reference_id": "CVE-2002-2006",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Low",
                            "scoring_system": "apache_tomcat",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2006"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2002-2006",
                    "reference_id": "CVE-2002-2006",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-2006"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/unix/remote/21412.txt",
                    "reference_id": "CVE-2002-2006;OSVDB-849",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/unix/remote/21412.txt"
                },
                {
                    "reference_url": "https://www.securityfocus.com/bid/4575/info",
                    "reference_id": "CVE-2002-2006;OSVDB-849",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://www.securityfocus.com/bid/4575/info"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-8g4f-fh7f-4fwh",
                    "reference_id": "GHSA-8g4f-fh7f-4fwh",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "cvssv3.1_qr",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/advisories/GHSA-8g4f-fh7f-4fwh"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5585?format=api",
                    "purl": "pkg:apache/tomcat@3.3.0-a",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3vnr-1343-dqcq"
                        },
                        {
                            "vulnerability": "VCID-7gme-bpf9-vuc6"
                        },
                        {
                            "vulnerability": "VCID-tujm-z3uf-abde"
                        },
                        {
                            "vulnerability": "VCID-u9g2-fqry-5fcu"
                        },
                        {
                            "vulnerability": "VCID-ypqb-ap2c-4ycc"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.3.0-a"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5533?format=api",
                    "purl": "pkg:apache/tomcat@4.1.0",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-12ue-np81-1bhx"
                        },
                        {
                            "vulnerability": "VCID-2ctt-1vkg-j7es"
                        },
                        {
                            "vulnerability": "VCID-2t8v-6yek-ckfn"
                        },
                        {
                            "vulnerability": "VCID-4ma9-urc9-bubh"
                        },
                        {
                            "vulnerability": "VCID-938j-55jz-fyf1"
                        },
                        {
                            "vulnerability": "VCID-av78-ggg2-x7fw"
                        },
                        {
                            "vulnerability": "VCID-b5tj-a1a5-bfaz"
                        },
                        {
                            "vulnerability": "VCID-b6dz-e575-xudf"
                        },
                        {
                            "vulnerability": "VCID-b9kc-tb5j-tfh6"
                        },
                        {
                            "vulnerability": "VCID-c96g-va5j-mqau"
                        },
                        {
                            "vulnerability": "VCID-f2vk-cyeq-y3ar"
                        },
                        {
                            "vulnerability": "VCID-fqj2-k7e7-rydn"
                        },
                        {
                            "vulnerability": "VCID-gve5-fam7-g7eh"
                        },
                        {
                            "vulnerability": "VCID-h1uu-cmta-83c1"
                        },
                        {
                            "vulnerability": "VCID-j51f-82vz-2kcs"
                        },
                        {
                            "vulnerability": "VCID-kypf-ay1s-6bah"
                        },
                        {
                            "vulnerability": "VCID-mq75-d7z2-yygg"
                        },
                        {
                            "vulnerability": "VCID-qagy-c28p-qkde"
                        },
                        {
                            "vulnerability": "VCID-qur2-b72r-nff2"
                        },
                        {
                            "vulnerability": "VCID-rdaa-zvr3-jfdz"
                        },
                        {
                            "vulnerability": "VCID-sp28-x6dh-2ffd"
                        },
                        {
                            "vulnerability": "VCID-svq9-dst7-bbac"
                        },
                        {
                            "vulnerability": "VCID-ttnn-f8f2-2ugz"
                        },
                        {
                            "vulnerability": "VCID-uq27-qyvn-hfar"
                        },
                        {
                            "vulnerability": "VCID-v7ak-xgna-r3bp"
                        },
                        {
                            "vulnerability": "VCID-vwjr-b3tg-6kc6"
                        },
                        {
                            "vulnerability": "VCID-y8dz-8914-pydr"
                        },
                        {
                            "vulnerability": "VCID-ytw6-k6vk-akc9"
                        },
                        {
                            "vulnerability": "VCID-yvhh-6p4j-1bdp"
                        },
                        {
                            "vulnerability": "VCID-zfr1-8ew7-vkad"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@4.1.0"
                }
            ],
            "aliases": [
                "CVE-2002-2006",
                "GHSA-8g4f-fh7f-4fwh"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-a1wc-fxfg-kkgv"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6846?format=api",
            "vulnerability_id": "VCID-nuuf-jtkd-2kfx",
            "summary": "",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2000-0760",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.30438",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96783",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2000-0760"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0760",
                    "reference_id": "CVE-2000-0760",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Low",
                            "scoring_system": "apache_tomcat",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0760"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/20132.txt",
                    "reference_id": "CVE-2000-0760;OSVDB-377",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/20132.txt"
                },
                {
                    "reference_url": "https://www.securityfocus.com/bid/1532/info",
                    "reference_id": "CVE-2000-0760;OSVDB-377",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://www.securityfocus.com/bid/1532/info"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5585?format=api",
                    "purl": "pkg:apache/tomcat@3.3.0-a",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3vnr-1343-dqcq"
                        },
                        {
                            "vulnerability": "VCID-7gme-bpf9-vuc6"
                        },
                        {
                            "vulnerability": "VCID-tujm-z3uf-abde"
                        },
                        {
                            "vulnerability": "VCID-u9g2-fqry-5fcu"
                        },
                        {
                            "vulnerability": "VCID-ypqb-ap2c-4ycc"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.3.0-a"
                }
            ],
            "aliases": [
                "CVE-2000-0760"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nuuf-jtkd-2kfx"
        }
    ],
    "risk_score": "4.0",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.3.0-a"
}