Lookup for vulnerable packages by Package URL.

GET /api/packages/935169?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/935169?format=api",
    "purl": "pkg:deb/debian/phpmyadmin@4:2.10.0.2-1?distro=trixie",
    "type": "deb",
    "namespace": "debian",
    "name": "phpmyadmin",
    "version": "4:2.10.0.2-1",
    "qualifiers": {
        "distro": "trixie"
    },
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "4:2.10.1-1",
    "latest_non_vulnerable_version": "4:5.2.3+dfsg-1",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/91672?format=api",
            "vulnerability_id": "VCID-3pn2-zxhu-xqez",
            "summary": "Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by injecting arbitrary JavaScript or HTML in a (1) db or (2) table parameter value followed by an uppercase </SCRIPT> end tag, which bypasses the protection against lowercase </script>.",
            "references": [
                {
                    "reference_url": "http://osvdb.org/35048",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://osvdb.org/35048"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-1395",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82224",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82236",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84962",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84985",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84992",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85008",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85006",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85002",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85023",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85025",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85022",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85047",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85056",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85054",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8507",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85095",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85115",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85111",
                            "published_at": "2026-05-11T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85126",
                            "published_at": "2026-05-12T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85159",
                            "published_at": "2026-05-14T12:55:00Z"
                        },
                        {
                            "value": "0.02383",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84958",
                            "published_at": "2026-04-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-1395"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1395",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1395"
                },
                {
                    "reference_url": "http://secunia.com/advisories/26733",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://secunia.com/advisories/26733"
                },
                {
                    "reference_url": "http://securityreason.com/securityalert/2402",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://securityreason.com/securityalert/2402"
                },
                {
                    "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32858",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32858"
                },
                {
                    "reference_url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:199",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:199"
                },
                {
                    "reference_url": "http://www.securityfocus.com/archive/1/462139/100/0/threaded",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.securityfocus.com/archive/1/462139/100/0/threaded"
                },
                {
                    "reference_url": "http://www.us.debian.org/security/2007/dsa-1370",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.us.debian.org/security/2007/dsa-1370"
                },
                {
                    "reference_url": "http://www.virtuax.be/advisories/Advisory2-24012007.txt",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.virtuax.be/advisories/Advisory2-24012007.txt"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.1:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.1:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.1:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.2:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.2:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.2:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1_dev:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1_dev:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1_dev:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.2:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.2:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.2:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.3:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.3:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.3:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.4:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.4:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.4:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.1:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.1:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.1:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.2:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.2:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.2:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.3:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.3:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.3:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_beta1:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_beta1:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_beta1:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_dev:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_dev:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_dev:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_rc1:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_rc1:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_rc1:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1.1:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1.1:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1.1:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc1:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc1:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc1:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc2:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc2:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc2:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.2:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.2:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.2:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1395",
                    "reference_id": "CVE-2007-1395",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.3",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:P/A:N"
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1395"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/935169?format=api",
                    "purl": "pkg:deb/debian/phpmyadmin@4:2.10.0.2-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:2.10.0.2-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/935143?format=api",
                    "purl": "pkg:deb/debian/phpmyadmin@4:5.0.4%2Bdfsg2-2%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-na3j-h3qr-k7dc"
                        },
                        {
                            "vulnerability": "VCID-ndjn-p6gb-u7g4"
                        },
                        {
                            "vulnerability": "VCID-rqy8-n6fr-hqey"
                        },
                        {
                            "vulnerability": "VCID-zd8d-c1nk-g7a4"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.0.4%252Bdfsg2-2%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/935141?format=api",
                    "purl": "pkg:deb/debian/phpmyadmin@4:5.2.1%2Bdfsg-1%2Bdeb12u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-zd8d-c1nk-g7a4"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.1%252Bdfsg-1%252Bdeb12u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/935145?format=api",
                    "purl": "pkg:deb/debian/phpmyadmin@4:5.2.2-really%2Bdfsg-1%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.2-really%252Bdfsg-1%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/935144?format=api",
                    "purl": "pkg:deb/debian/phpmyadmin@4:5.2.3%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.3%252Bdfsg-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2007-1395"
            ],
            "risk_score": 1.9,
            "exploitability": "0.5",
            "weighted_severity": "3.9",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3pn2-zxhu-xqez"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/91670?format=api",
            "vulnerability_id": "VCID-whsp-haxh-yqas",
            "summary": "The PMA_ArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2 does not limit recursion on arrays provided by users, which allows context-dependent attackers to cause a denial of service (web server crash) via an array with many dimensions.  NOTE: it could be argued that this vulnerability is caused by a problem in PHP (CVE-2006-1549) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in phpMyAdmin.",
            "references": [
                {
                    "reference_url": "http://osvdb.org/36834",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://osvdb.org/36834"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-1325",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77033",
                            "published_at": "2026-05-14T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76793",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76797",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76826",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76806",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76837",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76847",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76876",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76856",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7685",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76894",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76898",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7689",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76922",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7693",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76942",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76931",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76961",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76979",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76967",
                            "published_at": "2026-05-11T12:55:00Z"
                        },
                        {
                            "value": "0.00988",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76983",
                            "published_at": "2026-05-12T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-1325"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1325",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1325"
                },
                {
                    "reference_url": "http://secunia.com/advisories/26733",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://secunia.com/advisories/26733"
                },
                {
                    "reference_url": "http://sourceforge.net/tracker/index.php?func=detail&aid=1671813&group_id=23067&atid=377408",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=1671813&group_id=23067&atid=377408"
                },
                {
                    "reference_url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:199",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:199"
                },
                {
                    "reference_url": "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-3",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-3"
                },
                {
                    "reference_url": "http://www.php.net/ChangeLog-4.php",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.php.net/ChangeLog-4.php"
                },
                {
                    "reference_url": "http://www.php.net/releases/4_4_8.php",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.php.net/releases/4_4_8.php"
                },
                {
                    "reference_url": "http://www.php-security.org/MOPB/MOPB-02-2007.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.php-security.org/MOPB/MOPB-02-2007.html"
                },
                {
                    "reference_url": "http://www.securityfocus.com/bid/22841",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.securityfocus.com/bid/22841"
                },
                {
                    "reference_url": "http://www.us.debian.org/security/2007/dsa-1370",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.us.debian.org/security/2007/dsa-1370"
                },
                {
                    "reference_url": "http://www.vupen.com/english/advisories/2007/0831",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.vupen.com/english/advisories/2007/0831"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1325",
                    "reference_id": "CVE-2007-1325",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.1",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:C"
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1325"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/935169?format=api",
                    "purl": "pkg:deb/debian/phpmyadmin@4:2.10.0.2-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:2.10.0.2-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/935143?format=api",
                    "purl": "pkg:deb/debian/phpmyadmin@4:5.0.4%2Bdfsg2-2%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-na3j-h3qr-k7dc"
                        },
                        {
                            "vulnerability": "VCID-ndjn-p6gb-u7g4"
                        },
                        {
                            "vulnerability": "VCID-rqy8-n6fr-hqey"
                        },
                        {
                            "vulnerability": "VCID-zd8d-c1nk-g7a4"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.0.4%252Bdfsg2-2%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/935141?format=api",
                    "purl": "pkg:deb/debian/phpmyadmin@4:5.2.1%2Bdfsg-1%2Bdeb12u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-zd8d-c1nk-g7a4"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.1%252Bdfsg-1%252Bdeb12u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/935145?format=api",
                    "purl": "pkg:deb/debian/phpmyadmin@4:5.2.2-really%2Bdfsg-1%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.2-really%252Bdfsg-1%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/935144?format=api",
                    "purl": "pkg:deb/debian/phpmyadmin@4:5.2.3%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.3%252Bdfsg-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2007-1325"
            ],
            "risk_score": 3.2,
            "exploitability": "0.5",
            "weighted_severity": "6.4",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-whsp-haxh-yqas"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:2.10.0.2-1%3Fdistro=trixie"
}