Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/978020?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/978020?format=api", "purl": "pkg:apk/alpine/apache2@2.4.59-r0?arch=armhf&distroversion=v3.16&reponame=main", "type": "apk", "namespace": "alpine", "name": "apache2", "version": "2.4.59-r0", "qualifiers": { "arch": "armhf", "distroversion": "v3.16", "reponame": "main" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3847?format=api", "vulnerability_id": "VCID-2e6w-fs4j-17g9", "summary": "HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-27316.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-27316.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-27316", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.89409", "scoring_system": "epss", "scoring_elements": "0.99546", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.89409", "scoring_system": "epss", "scoring_elements": "0.99542", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.89409", "scoring_system": "epss", "scoring_elements": "0.99543", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.89409", "scoring_system": "epss", "scoring_elements": "0.99545", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-27316" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38709", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38709" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43622", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43622" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45802", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45802" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24795", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24795" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27316", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27316" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068412", "reference_id": "1068412", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068412" }, { "reference_url": "https://www.openwall.com/lists/oss-security/2024/04/03/16", "reference_id": "16", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-29T15:46:29Z/" } ], "url": "https://www.openwall.com/lists/oss-security/2024/04/03/16" }, { "reference_url": "http://seclists.org/fulldisclosure/2024/Jul/18", "reference_id": "18", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-29T15:46:29Z/" } ], "url": "http://seclists.org/fulldisclosure/2024/Jul/18" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268277", "reference_id": "2268277", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268277" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2024/04/04/4", "reference_id": "4", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-29T15:46:29Z/" } ], "url": "http://www.openwall.com/lists/oss-security/2024/04/04/4" }, { "reference_url": "https://httpd.apache.org/security/json/CVE-2024-27316.json", "reference_id": "CVE-2024-27316", "reference_type": "", "scores": [], "url": "https://httpd.apache.org/security/json/CVE-2024-27316.json" }, { "reference_url": "https://security.gentoo.org/glsa/202409-31", "reference_id": "GLSA-202409-31", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202409-31" }, { "reference_url": "https://support.apple.com/kb/HT214119", "reference_id": "HT214119", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-29T15:46:29Z/" } ], "url": "https://support.apple.com/kb/HT214119" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:1786", "reference_id": "RHSA-2024:1786", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:1786" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:1872", "reference_id": "RHSA-2024:1872", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:1872" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2564", "reference_id": "RHSA-2024:2564", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2564" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2693", "reference_id": "RHSA-2024:2693", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2693" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2694", "reference_id": "RHSA-2024:2694", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2694" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2891", "reference_id": "RHSA-2024:2891", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2891" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2907", "reference_id": "RHSA-2024:2907", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2907" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:3402", "reference_id": "RHSA-2024:3402", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:3402" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:3417", "reference_id": "RHSA-2024:3417", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:3417" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:4390", "reference_id": "RHSA-2024:4390", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:4390" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16668", "reference_id": "RHSA-2025:16668", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16668" }, { "reference_url": "https://usn.ubuntu.com/6729-1/", "reference_id": "USN-6729-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6729-1/" }, { "reference_url": "https://usn.ubuntu.com/6729-2/", "reference_id": "USN-6729-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6729-2/" }, { "reference_url": "https://usn.ubuntu.com/6729-3/", "reference_id": "USN-6729-3", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6729-3/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/978020?format=api", "purl": "pkg:apk/alpine/apache2@2.4.59-r0?arch=armhf&distroversion=v3.16&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/apache2@2.4.59-r0%3Farch=armhf&distroversion=v3.16&reponame=main" } ], "aliases": [ "CVE-2024-27316" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2e6w-fs4j-17g9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3846?format=api", "vulnerability_id": "VCID-bau7-pme5-ckbt", "summary": "HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.\n\nUsers are recommended to upgrade to version 2.4.59, which fixes this issue.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-24795.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-24795.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-24795", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01123", "scoring_system": "epss", "scoring_elements": "0.78267", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.01123", "scoring_system": "epss", "scoring_elements": "0.78264", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01123", "scoring_system": "epss", "scoring_elements": "0.78289", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.01123", "scoring_system": "epss", "scoring_elements": "0.78271", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01123", "scoring_system": "epss", "scoring_elements": "0.78219", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01123", "scoring_system": "epss", "scoring_elements": "0.78249", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01123", "scoring_system": "epss", "scoring_elements": "0.78231", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01123", "scoring_system": "epss", "scoring_elements": "0.78258", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-24795" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38709", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38709" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43622", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43622" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45802", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45802" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24795", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24795" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27316", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27316" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068412", "reference_id": "1068412", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068412" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273499", "reference_id": "2273499", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273499" }, { "reference_url": "https://httpd.apache.org/security/json/CVE-2024-24795.json", "reference_id": "CVE-2024-24795", "reference_type": "", "scores": [], "url": "https://httpd.apache.org/security/json/CVE-2024-24795.json" }, { "reference_url": "https://security.gentoo.org/glsa/202409-31", "reference_id": "GLSA-202409-31", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202409-31" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:9306", "reference_id": "RHSA-2024:9306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:9306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3452", "reference_id": "RHSA-2025:3452", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3452" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3453", "reference_id": "RHSA-2025:3453", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3453" }, { "reference_url": "https://usn.ubuntu.com/6729-1/", "reference_id": "USN-6729-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6729-1/" }, { "reference_url": "https://usn.ubuntu.com/6729-2/", "reference_id": "USN-6729-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6729-2/" }, { "reference_url": "https://usn.ubuntu.com/6729-3/", "reference_id": "USN-6729-3", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6729-3/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/978020?format=api", "purl": "pkg:apk/alpine/apache2@2.4.59-r0?arch=armhf&distroversion=v3.16&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/apache2@2.4.59-r0%3Farch=armhf&distroversion=v3.16&reponame=main" } ], "aliases": [ "CVE-2024-24795" ], "risk_score": 2.2, "exploitability": "0.5", "weighted_severity": "4.4", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bau7-pme5-ckbt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3843?format=api", "vulnerability_id": "VCID-xhyc-9rpu-2bc8", "summary": "Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.\n\nThis issue affects Apache HTTP Server: through 2.4.58.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38709.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38709.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-38709", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03255", "scoring_system": "epss", "scoring_elements": "0.87129", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.03255", "scoring_system": "epss", "scoring_elements": "0.8714", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.03255", "scoring_system": "epss", "scoring_elements": "0.87134", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.03342", "scoring_system": "epss", "scoring_elements": "0.87294", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.03342", "scoring_system": "epss", "scoring_elements": "0.87277", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.03342", "scoring_system": "epss", "scoring_elements": "0.87261", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.03342", "scoring_system": "epss", "scoring_elements": "0.87275", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.03342", "scoring_system": "epss", "scoring_elements": "0.87302", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-38709" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38709", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38709" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43622", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43622" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45802", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45802" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24795", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24795" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27316", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27316" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068412", "reference_id": "1068412", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068412" }, { "reference_url": "http://seclists.org/fulldisclosure/2024/Jul/18", "reference_id": "18", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-05T13:57:02Z/" } ], "url": "http://seclists.org/fulldisclosure/2024/Jul/18" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491", "reference_id": "2273491", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2024/04/04/3", "reference_id": "3", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-05T13:57:02Z/" } ], "url": "http://www.openwall.com/lists/oss-security/2024/04/04/3" }, { "reference_url": "https://httpd.apache.org/security/json/CVE-2023-38709.json", "reference_id": "CVE-2023-38709", "reference_type": "", "scores": [], "url": "https://httpd.apache.org/security/json/CVE-2023-38709.json" }, { "reference_url": "https://security.gentoo.org/glsa/202409-31", "reference_id": "GLSA-202409-31", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202409-31" }, { "reference_url": "https://support.apple.com/kb/HT214119", "reference_id": "HT214119", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-05T13:57:02Z/" } ], "url": "https://support.apple.com/kb/HT214119" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/", "reference_id": "I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-05T13:57:02Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/", "reference_id": "LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-05T13:57:02Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html", "reference_id": "msg00013.html", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-05T13:57:02Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240415-0013/", "reference_id": "ntap-20240415-0013", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-05T13:57:02Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240415-0013/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:4197", "reference_id": "RHSA-2024:4197", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:4197" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:6927", "reference_id": "RHSA-2024:6927", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:6927" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:6928", "reference_id": "RHSA-2024:6928", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:6928" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:9306", "reference_id": "RHSA-2024:9306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:9306" }, { "reference_url": "https://usn.ubuntu.com/6729-1/", "reference_id": "USN-6729-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6729-1/" }, { "reference_url": "https://usn.ubuntu.com/6729-2/", "reference_id": "USN-6729-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6729-2/" }, { "reference_url": "https://usn.ubuntu.com/6729-3/", "reference_id": "USN-6729-3", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6729-3/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/", "reference_id": "WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-05T13:57:02Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/978020?format=api", "purl": "pkg:apk/alpine/apache2@2.4.59-r0?arch=armhf&distroversion=v3.16&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/apache2@2.4.59-r0%3Farch=armhf&distroversion=v3.16&reponame=main" } ], "aliases": [ "CVE-2023-38709" ], "risk_score": 3.3, "exploitability": "0.5", "weighted_severity": "6.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xhyc-9rpu-2bc8" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/apache2@2.4.59-r0%3Farch=armhf&distroversion=v3.16&reponame=main" }