Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/161670?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/161670?format=api",
    "vulnerability_id": "VCID-m3r3-25yq-hqdc",
    "summary": "Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks.",
    "aliases": [
        {
            "alias": "CVE-2016-4606"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582846?format=api",
            "purl": "pkg:deb/debian/curl@0?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@0%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582363?format=api",
            "purl": "pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2cx5-1qnw-uufj"
                },
                {
                    "vulnerability": "VCID-2szj-xvgq-pkfr"
                },
                {
                    "vulnerability": "VCID-3qck-hm3c-tqaq"
                },
                {
                    "vulnerability": "VCID-4e1k-7bj9-hfch"
                },
                {
                    "vulnerability": "VCID-4gze-cwtp-2bgr"
                },
                {
                    "vulnerability": "VCID-4seq-hvbx-7fg8"
                },
                {
                    "vulnerability": "VCID-56wg-yafz-gkgx"
                },
                {
                    "vulnerability": "VCID-6we4-n888-6qhe"
                },
                {
                    "vulnerability": "VCID-8zks-th64-33b8"
                },
                {
                    "vulnerability": "VCID-bgdk-ebn7-eycn"
                },
                {
                    "vulnerability": "VCID-ddgz-rczw-jqfw"
                },
                {
                    "vulnerability": "VCID-etzn-uhck-h7b2"
                },
                {
                    "vulnerability": "VCID-g4jw-azg9-gqbs"
                },
                {
                    "vulnerability": "VCID-hayq-ra35-myf3"
                },
                {
                    "vulnerability": "VCID-mkyr-w79c-qqfz"
                },
                {
                    "vulnerability": "VCID-nvzd-v3bs-6qek"
                },
                {
                    "vulnerability": "VCID-pwn6-j8vf-rufk"
                },
                {
                    "vulnerability": "VCID-qbpd-star-6fgn"
                },
                {
                    "vulnerability": "VCID-qpux-jh6k-8qhx"
                },
                {
                    "vulnerability": "VCID-rsgn-r3yp-nkb6"
                },
                {
                    "vulnerability": "VCID-sshs-1k6e-cqer"
                },
                {
                    "vulnerability": "VCID-vbbv-k1r7-kkas"
                },
                {
                    "vulnerability": "VCID-x57x-w8g8-7ybz"
                },
                {
                    "vulnerability": "VCID-xpss-yndr-mycj"
                },
                {
                    "vulnerability": "VCID-yaas-j3qk-kfdg"
                },
                {
                    "vulnerability": "VCID-ydcp-ufa5-rqhd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582364?format=api",
            "purl": "pkg:deb/debian/curl@7.88.1-10%2Bdeb12u14?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2cx5-1qnw-uufj"
                },
                {
                    "vulnerability": "VCID-2szj-xvgq-pkfr"
                },
                {
                    "vulnerability": "VCID-3qck-hm3c-tqaq"
                },
                {
                    "vulnerability": "VCID-5xp7-mcsa-uqd4"
                },
                {
                    "vulnerability": "VCID-6we4-n888-6qhe"
                },
                {
                    "vulnerability": "VCID-8zks-th64-33b8"
                },
                {
                    "vulnerability": "VCID-bgdk-ebn7-eycn"
                },
                {
                    "vulnerability": "VCID-etzn-uhck-h7b2"
                },
                {
                    "vulnerability": "VCID-g4jw-azg9-gqbs"
                },
                {
                    "vulnerability": "VCID-hayq-ra35-myf3"
                },
                {
                    "vulnerability": "VCID-ksap-zrmb-ebcu"
                },
                {
                    "vulnerability": "VCID-mkyr-w79c-qqfz"
                },
                {
                    "vulnerability": "VCID-nvzd-v3bs-6qek"
                },
                {
                    "vulnerability": "VCID-qpux-jh6k-8qhx"
                },
                {
                    "vulnerability": "VCID-rsgn-r3yp-nkb6"
                },
                {
                    "vulnerability": "VCID-sshs-1k6e-cqer"
                },
                {
                    "vulnerability": "VCID-vbbv-k1r7-kkas"
                },
                {
                    "vulnerability": "VCID-x57x-w8g8-7ybz"
                },
                {
                    "vulnerability": "VCID-ydcp-ufa5-rqhd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.88.1-10%252Bdeb12u14%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582365?format=api",
            "purl": "pkg:deb/debian/curl@8.14.1-2%2Bdeb13u2?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2cx5-1qnw-uufj"
                },
                {
                    "vulnerability": "VCID-3qck-hm3c-tqaq"
                },
                {
                    "vulnerability": "VCID-5xp7-mcsa-uqd4"
                },
                {
                    "vulnerability": "VCID-8zks-th64-33b8"
                },
                {
                    "vulnerability": "VCID-amgy-dw6h-6ydf"
                },
                {
                    "vulnerability": "VCID-bgdk-ebn7-eycn"
                },
                {
                    "vulnerability": "VCID-etzn-uhck-h7b2"
                },
                {
                    "vulnerability": "VCID-g4jw-azg9-gqbs"
                },
                {
                    "vulnerability": "VCID-hayq-ra35-myf3"
                },
                {
                    "vulnerability": "VCID-kt4b-7ffh-4bch"
                },
                {
                    "vulnerability": "VCID-mkyr-w79c-qqfz"
                },
                {
                    "vulnerability": "VCID-nvzd-v3bs-6qek"
                },
                {
                    "vulnerability": "VCID-qpux-jh6k-8qhx"
                },
                {
                    "vulnerability": "VCID-rsgn-r3yp-nkb6"
                },
                {
                    "vulnerability": "VCID-sshs-1k6e-cqer"
                },
                {
                    "vulnerability": "VCID-vbbv-k1r7-kkas"
                },
                {
                    "vulnerability": "VCID-x57x-w8g8-7ybz"
                },
                {
                    "vulnerability": "VCID-ydcp-ufa5-rqhd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@8.14.1-2%252Bdeb13u2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582366?format=api",
            "purl": "pkg:deb/debian/curl@8.19.0-1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@8.19.0-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582367?format=api",
            "purl": "pkg:deb/debian/curl@8.19.0-3?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-3qck-hm3c-tqaq"
                },
                {
                    "vulnerability": "VCID-bgdk-ebn7-eycn"
                },
                {
                    "vulnerability": "VCID-g4jw-azg9-gqbs"
                },
                {
                    "vulnerability": "VCID-hayq-ra35-myf3"
                },
                {
                    "vulnerability": "VCID-rsgn-r3yp-nkb6"
                },
                {
                    "vulnerability": "VCID-sshs-1k6e-cqer"
                },
                {
                    "vulnerability": "VCID-ydcp-ufa5-rqhd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@8.19.0-3%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1067521?format=api",
            "purl": "pkg:deb/debian/curl@8.20.0~rc2-1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@8.20.0~rc2-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1077418?format=api",
            "purl": "pkg:deb/debian/curl@8.20.0~rc3-1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@8.20.0~rc3-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1088654?format=api",
            "purl": "pkg:deb/debian/curl@8.20.0-1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@8.20.0-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1113663?format=api",
            "purl": "pkg:deb/debian/curl@8.20.0-2?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@8.20.0-2%3Fdistro=trixie"
        }
    ],
    "affected_packages": [],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-4606",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00218",
                    "scoring_system": "epss",
                    "scoring_elements": "0.44368",
                    "published_at": "2026-04-01T12:55:00Z"
                },
                {
                    "value": "0.00218",
                    "scoring_system": "epss",
                    "scoring_elements": "0.44439",
                    "published_at": "2026-04-02T12:55:00Z"
                },
                {
                    "value": "0.00218",
                    "scoring_system": "epss",
                    "scoring_elements": "0.4446",
                    "published_at": "2026-04-04T12:55:00Z"
                },
                {
                    "value": "0.00218",
                    "scoring_system": "epss",
                    "scoring_elements": "0.44395",
                    "published_at": "2026-04-07T12:55:00Z"
                },
                {
                    "value": "0.00218",
                    "scoring_system": "epss",
                    "scoring_elements": "0.44446",
                    "published_at": "2026-04-08T12:55:00Z"
                },
                {
                    "value": "0.00218",
                    "scoring_system": "epss",
                    "scoring_elements": "0.44453",
                    "published_at": "2026-04-09T12:55:00Z"
                },
                {
                    "value": "0.00218",
                    "scoring_system": "epss",
                    "scoring_elements": "0.4447",
                    "published_at": "2026-04-11T12:55:00Z"
                },
                {
                    "value": "0.00218",
                    "scoring_system": "epss",
                    "scoring_elements": "0.44438",
                    "published_at": "2026-04-12T12:55:00Z"
                },
                {
                    "value": "0.00218",
                    "scoring_system": "epss",
                    "scoring_elements": "0.44437",
                    "published_at": "2026-04-13T12:55:00Z"
                },
                {
                    "value": "0.00218",
                    "scoring_system": "epss",
                    "scoring_elements": "0.44494",
                    "published_at": "2026-04-16T12:55:00Z"
                },
                {
                    "value": "0.00218",
                    "scoring_system": "epss",
                    "scoring_elements": "0.44484",
                    "published_at": "2026-04-18T12:55:00Z"
                },
                {
                    "value": "0.00218",
                    "scoring_system": "epss",
                    "scoring_elements": "0.44415",
                    "published_at": "2026-04-21T12:55:00Z"
                },
                {
                    "value": "0.01628",
                    "scoring_system": "epss",
                    "scoring_elements": "0.81933",
                    "published_at": "2026-04-24T12:55:00Z"
                },
                {
                    "value": "0.01628",
                    "scoring_system": "epss",
                    "scoring_elements": "0.81943",
                    "published_at": "2026-04-26T12:55:00Z"
                },
                {
                    "value": "0.01628",
                    "scoring_system": "epss",
                    "scoring_elements": "0.81948",
                    "published_at": "2026-04-29T12:55:00Z"
                },
                {
                    "value": "0.01628",
                    "scoring_system": "epss",
                    "scoring_elements": "0.81968",
                    "published_at": "2026-05-05T12:55:00Z"
                },
                {
                    "value": "0.01628",
                    "scoring_system": "epss",
                    "scoring_elements": "0.81988",
                    "published_at": "2026-05-07T12:55:00Z"
                },
                {
                    "value": "0.01628",
                    "scoring_system": "epss",
                    "scoring_elements": "0.82012",
                    "published_at": "2026-05-09T12:55:00Z"
                },
                {
                    "value": "0.01628",
                    "scoring_system": "epss",
                    "scoring_elements": "0.82009",
                    "published_at": "2026-05-11T12:55:00Z"
                },
                {
                    "value": "0.01628",
                    "scoring_system": "epss",
                    "scoring_elements": "0.82026",
                    "published_at": "2026-05-12T12:55:00Z"
                },
                {
                    "value": "0.01628",
                    "scoring_system": "epss",
                    "scoring_elements": "0.82066",
                    "published_at": "2026-05-14T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-4606"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": null,
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m3r3-25yq-hqdc"
}