Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/35614?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35614?format=api", "vulnerability_id": "VCID-g99f-q7vc-gyeg", "summary": "The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.", "aliases": [ { "alias": "CVE-2019-20916" }, { "alias": "GHSA-gpvv-69j7-gwj8" }, { "alias": "PYSEC-2020-173" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/18232?format=api", "purl": "pkg:pypi/pip@19.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@19.2" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/7502?format=api", "purl": "pkg:pypi/pip@0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/7503?format=api", "purl": "pkg:pypi/pip@0.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7504?format=api", "purl": "pkg:pypi/pip@0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/7505?format=api", "purl": "pkg:pypi/pip@0.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7506?format=api", "purl": "pkg:pypi/pip@0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/7507?format=api", "purl": "pkg:pypi/pip@0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/7508?format=api", "purl": "pkg:pypi/pip@0.5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.5.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7509?format=api", "purl": "pkg:pypi/pip@0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/7510?format=api", "purl": "pkg:pypi/pip@0.6.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.6.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7511?format=api", "purl": "pkg:pypi/pip@0.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.6.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/7512?format=api", "purl": "pkg:pypi/pip@0.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.6.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/7513?format=api", "purl": "pkg:pypi/pip@0.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/7514?format=api", "purl": "pkg:pypi/pip@0.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.7.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7515?format=api", "purl": "pkg:pypi/pip@0.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/7516?format=api", "purl": "pkg:pypi/pip@0.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/7517?format=api", "purl": "pkg:pypi/pip@0.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7518?format=api", "purl": "pkg:pypi/pip@0.8.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.8.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/7519?format=api", "purl": "pkg:pypi/pip@0.8.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@0.8.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/7520?format=api", "purl": "pkg:pypi/pip@1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/7521?format=api", "purl": "pkg:pypi/pip@1.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7522?format=api", "purl": "pkg:pypi/pip@1.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/7523?format=api", "purl": "pkg:pypi/pip@1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7524?format=api", "purl": "pkg:pypi/pip@1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/7525?format=api", "purl": "pkg:pypi/pip@1.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-gj8g-9yaz-nqbc" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-nuzx-bhxz-ukdr" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7526?format=api", "purl": "pkg:pypi/pip@1.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-3x2g-szs1-2ueh" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/8713?format=api", "purl": "pkg:pypi/pip@1.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-3x2g-szs1-2ueh" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/8714?format=api", "purl": "pkg:pypi/pip@1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-3x2g-szs1-2ueh" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/8715?format=api", "purl": "pkg:pypi/pip@1.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-3x2g-szs1-2ueh" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" }, { "vulnerability": "VCID-vqxe-ay7u-yfgj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/8716?format=api", "purl": "pkg:pypi/pip@1.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-3x2g-szs1-2ueh" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/8717?format=api", "purl": "pkg:pypi/pip@1.5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-3x2g-szs1-2ueh" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.5.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/8718?format=api", "purl": "pkg:pypi/pip@1.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-3x2g-szs1-2ueh" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.5.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/8719?format=api", "purl": "pkg:pypi/pip@1.5.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-3x2g-szs1-2ueh" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.5.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/8720?format=api", "purl": "pkg:pypi/pip@1.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-3x2g-szs1-2ueh" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.5.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/8721?format=api", "purl": "pkg:pypi/pip@1.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-3x2g-szs1-2ueh" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/8722?format=api", "purl": "pkg:pypi/pip@1.5.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-3x2g-szs1-2ueh" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@1.5.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/8723?format=api", "purl": "pkg:pypi/pip@6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/18192?format=api", "purl": "pkg:pypi/pip@6.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@6.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18193?format=api", "purl": "pkg:pypi/pip@6.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@6.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/18194?format=api", "purl": "pkg:pypi/pip@6.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@6.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/18195?format=api", "purl": "pkg:pypi/pip@6.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@6.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/18196?format=api", "purl": "pkg:pypi/pip@6.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@6.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/18197?format=api", "purl": "pkg:pypi/pip@6.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@6.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/18198?format=api", "purl": "pkg:pypi/pip@6.0.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@6.0.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/18199?format=api", "purl": "pkg:pypi/pip@6.0.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@6.0.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/18200?format=api", "purl": "pkg:pypi/pip@6.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@6.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/18201?format=api", "purl": "pkg:pypi/pip@6.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@6.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18202?format=api", "purl": "pkg:pypi/pip@7.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@7.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/18203?format=api", "purl": "pkg:pypi/pip@7.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@7.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18204?format=api", "purl": "pkg:pypi/pip@7.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@7.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/18205?format=api", "purl": "pkg:pypi/pip@7.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@7.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/18206?format=api", "purl": "pkg:pypi/pip@7.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@7.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/18207?format=api", "purl": "pkg:pypi/pip@7.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@7.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18208?format=api", "purl": "pkg:pypi/pip@7.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@7.1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/18209?format=api", "purl": "pkg:pypi/pip@8.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@8.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/18210?format=api", "purl": "pkg:pypi/pip@8.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@8.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18211?format=api", "purl": "pkg:pypi/pip@8.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@8.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/18212?format=api", "purl": "pkg:pypi/pip@8.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@8.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/18213?format=api", "purl": "pkg:pypi/pip@8.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@8.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/18214?format=api", "purl": "pkg:pypi/pip@8.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@8.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18215?format=api", "purl": "pkg:pypi/pip@8.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@8.1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/18216?format=api", "purl": "pkg:pypi/pip@9.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@9.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/18217?format=api", "purl": "pkg:pypi/pip@9.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@9.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18218?format=api", "purl": "pkg:pypi/pip@9.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@9.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/18219?format=api", "purl": "pkg:pypi/pip@9.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@9.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/18220?format=api", "purl": "pkg:pypi/pip@10.0.0b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@10.0.0b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18221?format=api", "purl": "pkg:pypi/pip@10.0.0b2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@10.0.0b2" }, { "url": "http://public2.vulnerablecode.io/api/packages/18222?format=api", "purl": "pkg:pypi/pip@10.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@10.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/18223?format=api", "purl": "pkg:pypi/pip@10.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@10.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18224?format=api", "purl": "pkg:pypi/pip@18.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@18.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/18225?format=api", "purl": "pkg:pypi/pip@18.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@18.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18226?format=api", "purl": "pkg:pypi/pip@19.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@19.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/18227?format=api", "purl": "pkg:pypi/pip@19.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@19.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18228?format=api", "purl": "pkg:pypi/pip@19.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@19.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/18229?format=api", "purl": "pkg:pypi/pip@19.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@19.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/18230?format=api", "purl": "pkg:pypi/pip@19.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@19.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18231?format=api", "purl": "pkg:pypi/pip@19.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1as6-9kq7-d7gy" }, { "vulnerability": "VCID-g99f-q7vc-gyeg" }, { "vulnerability": "VCID-mh4d-1b2e-bqem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pip@19.1.1" } ], "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00005.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00005.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00010.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00010.html" }, { "reference_url": "https://github.com/advisories/GHSA-gpvv-69j7-gwj8", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-gpvv-69j7-gwj8" }, { "reference_url": "https://github.com/gzpan123/pip/commit/a4c735b14a62f9cb864533808ac63936704f2ace", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/gzpan123/pip/commit/a4c735b14a62f9cb864533808ac63936704f2ace" }, { "reference_url": "https://github.com/pypa/pip/compare/19.1.1...19.2", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/pip/compare/19.1.1...19.2" }, { "reference_url": "https://github.com/pypa/pip/issues/6413", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/pip/issues/6413" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00010.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00010.html" } ], "weaknesses": [], "exploits": [], "severity_range_score": null, "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-g99f-q7vc-gyeg" }