Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/565752?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/565752?format=api", "purl": "pkg:composer/pagekit/pagekit@1.0.16", "type": "composer", "namespace": "pagekit", "name": "pagekit", "version": "1.0.16", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/55918?format=api", "vulnerability_id": "VCID-547d-prcv-ekc9", "summary": "Pagekit Cross-site Scripting vulnerability\nPagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-45967", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00209", "scoring_system": "epss", "scoring_elements": "0.4338", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00209", "scoring_system": "epss", "scoring_elements": "0.43321", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00209", "scoring_system": "epss", "scoring_elements": "0.43356", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00209", "scoring_system": "epss", "scoring_elements": "0.4337", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-45967" }, { "reference_url": "https://github.com/pagekit/pagekit", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pagekit/pagekit" }, { "reference_url": "https://github.com/yingning620/test123/blob/main/Pagekit%20CMS/Pagekit%20CMS%20v1.0.18%20%E5%AD%98%E5%82%A8%E5%9E%8BXSS.md", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" }, { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-01T14:42:55Z/" } ], "url": "https://github.com/yingning620/test123/blob/main/Pagekit%20CMS/Pagekit%20CMS%20v1.0.18%20%E5%AD%98%E5%82%A8%E5%9E%8BXSS.md" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45967", "reference_id": "CVE-2024-45967", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45967" }, { "reference_url": "https://github.com/advisories/GHSA-xw32-6422-frqm", "reference_id": "GHSA-xw32-6422-frqm", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xw32-6422-frqm" } ], "fixed_packages": [], "aliases": [ "CVE-2024-45967", "GHSA-xw32-6422-frqm" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-547d-prcv-ekc9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42822?format=api", "vulnerability_id": "VCID-8cnm-te58-dfdt", "summary": "SQL injection\npagekit all versions, as of 2022-04-06, is vulnerable to SQL Injection via Comment listing.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-44135", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00272", "scoring_system": "epss", "scoring_elements": "0.50811", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00272", "scoring_system": "epss", "scoring_elements": "0.50782", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00272", "scoring_system": "epss", "scoring_elements": "0.50842", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00272", "scoring_system": "epss", "scoring_elements": "0.50848", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00272", "scoring_system": "epss", "scoring_elements": "0.50826", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00272", "scoring_system": "epss", "scoring_elements": "0.50796", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-44135" }, { "reference_url": "https://github.com/pagekit/pagekit", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pagekit/pagekit" }, { "reference_url": "https://huntr.dev/bounties/82f09b08-ceeb-4249-8855-b8bc718c4868", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/82f09b08-ceeb-4249-8855-b8bc718c4868" }, { "reference_url": "https://huntr.dev/bounties/82f09b08-ceeb-4249-8855-b8bc718c4868/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/82f09b08-ceeb-4249-8855-b8bc718c4868/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44135", "reference_id": "CVE-2021-44135", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44135" }, { "reference_url": "https://github.com/advisories/GHSA-45hc-r4fj-qj89", "reference_id": "GHSA-45hc-r4fj-qj89", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-45hc-r4fj-qj89" } ], "fixed_packages": [], "aliases": [ "CVE-2021-44135", "GHSA-45hc-r4fj-qj89" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8cnm-te58-dfdt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49463?format=api", "vulnerability_id": "VCID-mpx5-sw52-qkhp", "summary": "Pagekit CMS is vulnerable to OS Command Injection via Storage component\nAn authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file.\n\nThe project is archived as of December 1, 2023.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67164", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00112", "scoring_system": "epss", "scoring_elements": "0.29273", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00112", "scoring_system": "epss", "scoring_elements": "0.29171", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00112", "scoring_system": "epss", "scoring_elements": "0.29205", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00112", "scoring_system": "epss", "scoring_elements": "0.2924", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67164" }, { "reference_url": "https://github.com/pagekit/pagekit", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pagekit/pagekit" }, { "reference_url": "https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67164", "reference_id": "CVE-2025-67164", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-12-17T18:29:34Z/" } ], "url": "https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67164" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67164", "reference_id": "CVE-2025-67164", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67164" }, { "reference_url": "https://github.com/advisories/GHSA-m4f2-xpfq-h97v", "reference_id": "GHSA-m4f2-xpfq-h97v", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m4f2-xpfq-h97v" } ], "fixed_packages": [], "aliases": [ "CVE-2025-67164", "GHSA-m4f2-xpfq-h97v" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mpx5-sw52-qkhp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49459?format=api", "vulnerability_id": "VCID-ut3j-qxt4-rqds", "summary": "Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component\nAn Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.\n\nThe project was archived as of December 1, 2023.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67165", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00125", "scoring_system": "epss", "scoring_elements": "0.31157", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00125", "scoring_system": "epss", "scoring_elements": "0.31189", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00125", "scoring_system": "epss", "scoring_elements": "0.31225", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00125", "scoring_system": "epss", "scoring_elements": "0.31258", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67165" }, { "reference_url": "https://github.com/pagekit/docs/blob/develop/user-interface/users.md#permissions", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-17T18:31:33Z/" } ], "url": "https://github.com/pagekit/docs/blob/develop/user-interface/users.md#permissions" }, { "reference_url": "https://github.com/pagekit/docs/blob/develop/user-interface/users.md#roles", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-17T18:31:33Z/" } ], "url": "https://github.com/pagekit/docs/blob/develop/user-interface/users.md#roles" }, { "reference_url": "https://github.com/pagekit/pagekit", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-17T18:31:33Z/" } ], "url": "https://github.com/pagekit/pagekit" }, { "reference_url": "https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67165", "reference_id": "CVE-2025-67165", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-17T18:31:33Z/" } ], "url": "https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67165" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67165", "reference_id": "CVE-2025-67165", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67165" }, { "reference_url": "https://github.com/advisories/GHSA-w3j8-9p3j-3wjx", "reference_id": "GHSA-w3j8-9p3j-3wjx", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-w3j8-9p3j-3wjx" } ], "fixed_packages": [], "aliases": [ "CVE-2025-67165", "GHSA-w3j8-9p3j-3wjx" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ut3j-qxt4-rqds" } ], "fixing_vulnerabilities": [], "risk_score": "4.5", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/pagekit/pagekit@1.0.16" }