Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/59828?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/59828?format=api",
    "vulnerability_id": "VCID-nssu-1x9p-mudc",
    "summary": "security update",
    "aliases": [
        {
            "alias": "CVE-2015-2319"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1035141?format=api",
            "purl": "pkg:deb/debian/mono@2.10.8.1-8%2Bdeb7u1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2jhf-j64s-gygy"
                },
                {
                    "vulnerability": "VCID-azkx-bdnb-ebbg"
                },
                {
                    "vulnerability": "VCID-fc3w-b9en-rbbm"
                },
                {
                    "vulnerability": "VCID-nssu-1x9p-mudc"
                },
                {
                    "vulnerability": "VCID-w6qh-dtdh-1bep"
                },
                {
                    "vulnerability": "VCID-xzc1-cy42-2ub4"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@2.10.8.1-8%252Bdeb7u1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/931067?format=api",
            "purl": "pkg:deb/debian/mono@3.2.8%2Bdfsg-10?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@3.2.8%252Bdfsg-10%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1050369?format=api",
            "purl": "pkg:deb/debian/mono@3.2.8%2Bdfsg-10",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2jhf-j64s-gygy"
                },
                {
                    "vulnerability": "VCID-azkx-bdnb-ebbg"
                },
                {
                    "vulnerability": "VCID-xzc1-cy42-2ub4"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@3.2.8%252Bdfsg-10"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/931052?format=api",
            "purl": "pkg:deb/debian/mono@6.8.0.105%2Bdfsg-3.3~deb11u1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@6.8.0.105%252Bdfsg-3.3~deb11u1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/931050?format=api",
            "purl": "pkg:deb/debian/mono@6.8.0.105%2Bdfsg-3.3%2Bdeb12u1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@6.8.0.105%252Bdfsg-3.3%252Bdeb12u1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/931054?format=api",
            "purl": "pkg:deb/debian/mono@6.12.0.199%2Bdfsg-6?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@6.12.0.199%252Bdfsg-6%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/931053?format=api",
            "purl": "pkg:deb/debian/mono@6.14.1%2Bds2-2?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@6.14.1%252Bds2-2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1104238?format=api",
            "purl": "pkg:deb/debian/mono@6.14.1%2Bds2-3?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@6.14.1%252Bds2-3%3Fdistro=trixie"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1035136?format=api",
            "purl": "pkg:deb/debian/mono@1.2.2.1-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2jhf-j64s-gygy"
                },
                {
                    "vulnerability": "VCID-4g67-mxz3-27ak"
                },
                {
                    "vulnerability": "VCID-75b6-ycq1-93ay"
                },
                {
                    "vulnerability": "VCID-azkx-bdnb-ebbg"
                },
                {
                    "vulnerability": "VCID-c1c3-ck5x-mkay"
                },
                {
                    "vulnerability": "VCID-f6cm-frak-aydf"
                },
                {
                    "vulnerability": "VCID-fc3w-b9en-rbbm"
                },
                {
                    "vulnerability": "VCID-nssu-1x9p-mudc"
                },
                {
                    "vulnerability": "VCID-nz8p-usaz-8kgt"
                },
                {
                    "vulnerability": "VCID-s4yu-1s7d-bufz"
                },
                {
                    "vulnerability": "VCID-sgsg-b4yc-juh6"
                },
                {
                    "vulnerability": "VCID-w6qh-dtdh-1bep"
                },
                {
                    "vulnerability": "VCID-xzc1-cy42-2ub4"
                },
                {
                    "vulnerability": "VCID-yqu4-jn6n-eug3"
                },
                {
                    "vulnerability": "VCID-z7ht-bq8z-3qgd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@1.2.2.1-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1035137?format=api",
            "purl": "pkg:deb/debian/mono@1.2.2.1-1etch1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2jhf-j64s-gygy"
                },
                {
                    "vulnerability": "VCID-4g67-mxz3-27ak"
                },
                {
                    "vulnerability": "VCID-75b6-ycq1-93ay"
                },
                {
                    "vulnerability": "VCID-azkx-bdnb-ebbg"
                },
                {
                    "vulnerability": "VCID-c1c3-ck5x-mkay"
                },
                {
                    "vulnerability": "VCID-f6cm-frak-aydf"
                },
                {
                    "vulnerability": "VCID-fc3w-b9en-rbbm"
                },
                {
                    "vulnerability": "VCID-nssu-1x9p-mudc"
                },
                {
                    "vulnerability": "VCID-nz8p-usaz-8kgt"
                },
                {
                    "vulnerability": "VCID-s4yu-1s7d-bufz"
                },
                {
                    "vulnerability": "VCID-sgsg-b4yc-juh6"
                },
                {
                    "vulnerability": "VCID-w6qh-dtdh-1bep"
                },
                {
                    "vulnerability": "VCID-xzc1-cy42-2ub4"
                },
                {
                    "vulnerability": "VCID-yqu4-jn6n-eug3"
                },
                {
                    "vulnerability": "VCID-z7ht-bq8z-3qgd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@1.2.2.1-1etch1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1035138?format=api",
            "purl": "pkg:deb/debian/mono@1.9.1%2Bdfsg-6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2jhf-j64s-gygy"
                },
                {
                    "vulnerability": "VCID-4g67-mxz3-27ak"
                },
                {
                    "vulnerability": "VCID-75b6-ycq1-93ay"
                },
                {
                    "vulnerability": "VCID-azkx-bdnb-ebbg"
                },
                {
                    "vulnerability": "VCID-c1c3-ck5x-mkay"
                },
                {
                    "vulnerability": "VCID-fc3w-b9en-rbbm"
                },
                {
                    "vulnerability": "VCID-nssu-1x9p-mudc"
                },
                {
                    "vulnerability": "VCID-nz8p-usaz-8kgt"
                },
                {
                    "vulnerability": "VCID-s4yu-1s7d-bufz"
                },
                {
                    "vulnerability": "VCID-w6qh-dtdh-1bep"
                },
                {
                    "vulnerability": "VCID-xzc1-cy42-2ub4"
                },
                {
                    "vulnerability": "VCID-z7ht-bq8z-3qgd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@1.9.1%252Bdfsg-6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1035139?format=api",
            "purl": "pkg:deb/debian/mono@2.6.7-5.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2jhf-j64s-gygy"
                },
                {
                    "vulnerability": "VCID-75b6-ycq1-93ay"
                },
                {
                    "vulnerability": "VCID-azkx-bdnb-ebbg"
                },
                {
                    "vulnerability": "VCID-fc3w-b9en-rbbm"
                },
                {
                    "vulnerability": "VCID-nssu-1x9p-mudc"
                },
                {
                    "vulnerability": "VCID-nz8p-usaz-8kgt"
                },
                {
                    "vulnerability": "VCID-w6qh-dtdh-1bep"
                },
                {
                    "vulnerability": "VCID-xzc1-cy42-2ub4"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@2.6.7-5.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1035140?format=api",
            "purl": "pkg:deb/debian/mono@2.6.7-5.1%2Bdeb6u2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2jhf-j64s-gygy"
                },
                {
                    "vulnerability": "VCID-75b6-ycq1-93ay"
                },
                {
                    "vulnerability": "VCID-azkx-bdnb-ebbg"
                },
                {
                    "vulnerability": "VCID-fc3w-b9en-rbbm"
                },
                {
                    "vulnerability": "VCID-nssu-1x9p-mudc"
                },
                {
                    "vulnerability": "VCID-nz8p-usaz-8kgt"
                },
                {
                    "vulnerability": "VCID-w6qh-dtdh-1bep"
                },
                {
                    "vulnerability": "VCID-xzc1-cy42-2ub4"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@2.6.7-5.1%252Bdeb6u2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1035141?format=api",
            "purl": "pkg:deb/debian/mono@2.10.8.1-8%2Bdeb7u1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2jhf-j64s-gygy"
                },
                {
                    "vulnerability": "VCID-azkx-bdnb-ebbg"
                },
                {
                    "vulnerability": "VCID-fc3w-b9en-rbbm"
                },
                {
                    "vulnerability": "VCID-nssu-1x9p-mudc"
                },
                {
                    "vulnerability": "VCID-w6qh-dtdh-1bep"
                },
                {
                    "vulnerability": "VCID-xzc1-cy42-2ub4"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@2.10.8.1-8%252Bdeb7u1"
        }
    ],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-2319",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75441",
                    "published_at": "2026-05-14T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75385",
                    "published_at": "2026-05-12T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75205",
                    "published_at": "2026-04-01T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75207",
                    "published_at": "2026-04-02T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75238",
                    "published_at": "2026-04-04T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75216",
                    "published_at": "2026-04-07T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75258",
                    "published_at": "2026-04-08T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75269",
                    "published_at": "2026-04-09T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.7529",
                    "published_at": "2026-04-11T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75267",
                    "published_at": "2026-04-12T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75256",
                    "published_at": "2026-04-13T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75295",
                    "published_at": "2026-04-16T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75302",
                    "published_at": "2026-04-18T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75293",
                    "published_at": "2026-04-21T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75328",
                    "published_at": "2026-04-24T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75332",
                    "published_at": "2026-04-26T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75335",
                    "published_at": "2026-04-29T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75344",
                    "published_at": "2026-05-05T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75373",
                    "published_at": "2026-05-07T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75398",
                    "published_at": "2026-05-09T12:55:00Z"
                },
                {
                    "value": "0.00874",
                    "scoring_system": "epss",
                    "scoring_elements": "0.75377",
                    "published_at": "2026-05-11T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-2319"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202869",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202869"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2318",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2318"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2319",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2319"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2320",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2320"
        },
        {
            "reference_url": "https://github.com/mono/mono/commit/9c38772f094168d8bfd5bc73bf8925cd04faad10",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/mono/mono/commit/9c38772f094168d8bfd5bc73bf8925cd04faad10"
        },
        {
            "reference_url": "https://mitls.org/pages/attacks/SMACK#freak",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://mitls.org/pages/attacks/SMACK#freak"
        },
        {
            "reference_url": "https://www.debian.org/security/2015/dsa-3202",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://www.debian.org/security/2015/dsa-3202"
        },
        {
            "reference_url": "http://www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/"
        },
        {
            "reference_url": "http://www.openwall.com/lists/oss-security/2015/03/17/9",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.openwall.com/lists/oss-security/2015/03/17/9"
        },
        {
            "reference_url": "http://www.securityfocus.com/bid/73250",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.securityfocus.com/bid/73250"
        },
        {
            "reference_url": "http://www.ubuntu.com/usn/USN-2547-1",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.ubuntu.com/usn/USN-2547-1"
        },
        {
            "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780751",
            "reference_id": "780751",
            "reference_type": "",
            "scores": [],
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780751"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mono-project:mono:*:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:mono-project:mono:*:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mono-project:mono:*:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2319",
            "reference_id": "CVE-2015-2319",
            "reference_type": "",
            "scores": [
                {
                    "value": "5.0",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:L/Au:N/C:P/I:N/A:N"
                },
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2319"
        },
        {
            "reference_url": "https://usn.ubuntu.com/2547-1/",
            "reference_id": "USN-2547-1",
            "reference_type": "",
            "scores": [],
            "url": "https://usn.ubuntu.com/2547-1/"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 295,
            "name": "Improper Certificate Validation",
            "description": "The product does not validate, or incorrectly validates, a certificate."
        }
    ],
    "exploits": [],
    "severity_range_score": "5.0 - 7.5",
    "exploitability": "0.5",
    "weighted_severity": "6.8",
    "risk_score": 3.4,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nssu-1x9p-mudc"
}