Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/582688?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/582688?format=api", "purl": "pkg:maven/com.google.gerrit/gerrit-plugin-api@2.14.15", "type": "maven", "namespace": "com.google.gerrit", "name": "gerrit-plugin-api", "version": "2.14.15", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "2.15-rc0", "latest_non_vulnerable_version": "3.2.5", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/112444?format=api", "vulnerability_id": "VCID-w2yz-4e2j-9kb7", "summary": "Information leak in Gerrit\nAn information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verification of access on All-Users repositories, allowing an attacker to get read access to all users' personal information associated with their accounts.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-8920", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00076", "scoring_system": "epss", "scoring_elements": "0.22811", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00076", "scoring_system": "epss", "scoring_elements": "0.22833", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00076", "scoring_system": "epss", "scoring_elements": "0.22876", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00076", "scoring_system": "epss", "scoring_elements": "0.22892", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00076", "scoring_system": "epss", "scoring_elements": "0.22785", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00076", "scoring_system": "epss", "scoring_elements": "0.22782", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-8920" }, { "reference_url": "https://gerrit.googlesource.com/gerrit/+/45071d6977932bca5a1427c8abad24710fed2e33", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://gerrit.googlesource.com/gerrit/+/45071d6977932bca5a1427c8abad24710fed2e33" }, { "reference_url": "https://issues.gerritcodereview.com/issues/40012986", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://issues.gerritcodereview.com/issues/40012986" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8920", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8920" }, { "reference_url": "https://www.gerritcodereview.com/2.14.html#21422", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.gerritcodereview.com/2.14.html#21422" }, { "reference_url": "https://www.gerritcodereview.com/2.15.html#21521", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.gerritcodereview.com/2.15.html#21521" }, { "reference_url": "https://www.gerritcodereview.com/2.16.html#21625", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.gerritcodereview.com/2.16.html#21625" }, { "reference_url": "https://www.gerritcodereview.com/3.0.html#3015", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.gerritcodereview.com/3.0.html#3015" }, { "reference_url": "https://www.gerritcodereview.com/3.1.html#3110", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.gerritcodereview.com/3.1.html#3110" }, { "reference_url": "https://www.gerritcodereview.com/3.2.html#325", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.gerritcodereview.com/3.2.html#325" }, { "reference_url": "https://github.com/advisories/GHSA-g5q2-cxgq-h2rw", "reference_id": "GHSA-g5q2-cxgq-h2rw", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-g5q2-cxgq-h2rw" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/155965?format=api", "purl": "pkg:maven/com.google.gerrit/gerrit-plugin-api@2.14.22", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.google.gerrit/gerrit-plugin-api@2.14.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/582695?format=api", "purl": "pkg:maven/com.google.gerrit/gerrit-plugin-api@2.15-rc0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.google.gerrit/gerrit-plugin-api@2.15-rc0" }, { "url": "http://public2.vulnerablecode.io/api/packages/155968?format=api", "purl": "pkg:maven/com.google.gerrit/gerrit-plugin-api@2.15.21", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.google.gerrit/gerrit-plugin-api@2.15.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/155970?format=api", "purl": "pkg:maven/com.google.gerrit/gerrit-plugin-api@2.16.25", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.google.gerrit/gerrit-plugin-api@2.16.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/155973?format=api", "purl": "pkg:maven/com.google.gerrit/gerrit-plugin-api@3.0.15", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.google.gerrit/gerrit-plugin-api@3.0.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/155976?format=api", "purl": "pkg:maven/com.google.gerrit/gerrit-plugin-api@3.1.10", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.google.gerrit/gerrit-plugin-api@3.1.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/155979?format=api", "purl": "pkg:maven/com.google.gerrit/gerrit-plugin-api@3.2.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.google.gerrit/gerrit-plugin-api@3.2.5" } ], "aliases": [ "CVE-2020-8920", "GHSA-g5q2-cxgq-h2rw" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w2yz-4e2j-9kb7" } ], "fixing_vulnerabilities": [], "risk_score": "1.4", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.google.gerrit/gerrit-plugin-api@2.14.15" }