Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/61366?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61366?format=api", "vulnerability_id": "VCID-z6hn-789k-dbgj", "summary": "The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to \"a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes.\"", "aliases": [ { "alias": "CVE-2007-6721" }, { "alias": "GHSA-m26p-m559-g5j5" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/89407?format=api", "purl": "pkg:deb/debian/bouncycastle@1.38-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/bouncycastle@1.38-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/5957?format=api", "purl": "pkg:deb/debian/bouncycastle@1.39-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2pjq-5np3-buhj" }, { "vulnerability": "VCID-5pwz-mdv3-dkak" }, { "vulnerability": "VCID-64mt-9155-tkbv" }, { "vulnerability": "VCID-72cc-rqu5-hub5" }, { "vulnerability": "VCID-ah8x-azmn-zbgq" }, { "vulnerability": "VCID-bf8c-jrdf-mfaw" }, { "vulnerability": "VCID-cjnx-86t9-uufs" }, { "vulnerability": "VCID-cnvy-kp5d-pkes" }, { "vulnerability": "VCID-crd1-k1qv-jkec" }, { "vulnerability": "VCID-gf2f-22xn-z7fq" }, { "vulnerability": "VCID-hkej-a1pn-2kh3" }, { "vulnerability": "VCID-k31z-bskx-uuc9" }, { "vulnerability": "VCID-q8ux-tmpf-sue2" }, { "vulnerability": "VCID-qap8-a94t-3yac" }, { "vulnerability": "VCID-qe69-rd9d-4kgg" }, { "vulnerability": "VCID-rh2m-yftg-7uc9" }, { "vulnerability": "VCID-sxxg-bjnq-2kf7" }, { "vulnerability": "VCID-txmh-5548-ckdg" }, { "vulnerability": "VCID-umbv-yqxu-cubb" }, { "vulnerability": "VCID-ut6k-7z6d-zqh1" }, { "vulnerability": "VCID-v4g4-vznr-zuhp" }, { "vulnerability": "VCID-zkjk-uddk-9qem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/bouncycastle@1.39-2" }, { "url": "http://public2.vulnerablecode.io/api/packages/89408?format=api", "purl": "pkg:deb/debian/bouncycastle@1.68-2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-7jw5-6bfa-u7a4" }, { "vulnerability": "VCID-98ws-cchw-a3fe" }, { "vulnerability": "VCID-c558-uvxv-8fdf" }, { "vulnerability": "VCID-cqfw-r4um-hyd6" }, { "vulnerability": "VCID-f47r-4t52-3bgq" }, { "vulnerability": "VCID-fdgv-77kb-ybat" }, { "vulnerability": "VCID-s4tz-g6jv-7ub4" }, { "vulnerability": "VCID-we5n-w376-tkda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/bouncycastle@1.68-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/89406?format=api", "purl": "pkg:deb/debian/bouncycastle@1.72-2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-7jw5-6bfa-u7a4" }, { "vulnerability": "VCID-98ws-cchw-a3fe" }, { "vulnerability": "VCID-c558-uvxv-8fdf" }, { "vulnerability": "VCID-cqfw-r4um-hyd6" }, { "vulnerability": "VCID-f47r-4t52-3bgq" }, { "vulnerability": "VCID-fdgv-77kb-ybat" }, { "vulnerability": "VCID-jt6u-jzrn-pkdt" }, { "vulnerability": "VCID-s4tz-g6jv-7ub4" }, { "vulnerability": "VCID-we5n-w376-tkda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/bouncycastle@1.72-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/89409?format=api", "purl": "pkg:deb/debian/bouncycastle@1.80-3?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-jt6u-jzrn-pkdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/bouncycastle@1.80-3%3Fdistro=trixie" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5956?format=api", "purl": "pkg:deb/debian/bouncycastle@1.33-4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2pjq-5np3-buhj" }, { "vulnerability": "VCID-5pwz-mdv3-dkak" }, { "vulnerability": "VCID-64mt-9155-tkbv" }, { "vulnerability": "VCID-72cc-rqu5-hub5" }, { "vulnerability": "VCID-ah8x-azmn-zbgq" }, { "vulnerability": "VCID-bf8c-jrdf-mfaw" }, { "vulnerability": "VCID-cjnx-86t9-uufs" }, { "vulnerability": "VCID-cnvy-kp5d-pkes" }, { "vulnerability": "VCID-crd1-k1qv-jkec" }, { "vulnerability": "VCID-gf2f-22xn-z7fq" }, { "vulnerability": "VCID-hkej-a1pn-2kh3" }, { "vulnerability": "VCID-k31z-bskx-uuc9" }, { "vulnerability": "VCID-q8ux-tmpf-sue2" }, { "vulnerability": "VCID-qap8-a94t-3yac" }, { "vulnerability": "VCID-qe69-rd9d-4kgg" }, { "vulnerability": "VCID-rh2m-yftg-7uc9" }, { "vulnerability": "VCID-sxxg-bjnq-2kf7" }, { "vulnerability": "VCID-txmh-5548-ckdg" }, { "vulnerability": "VCID-umbv-yqxu-cubb" }, { "vulnerability": "VCID-ut6k-7z6d-zqh1" }, { "vulnerability": "VCID-v4g4-vznr-zuhp" }, { "vulnerability": "VCID-z6hn-789k-dbgj" }, { "vulnerability": "VCID-zkjk-uddk-9qem" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/bouncycastle@1.33-4" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6721.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6721.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-6721", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00856", "scoring_system": "epss", "scoring_elements": "0.75334", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00856", "scoring_system": "epss", "scoring_elements": "0.75367", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00856", "scoring_system": "epss", "scoring_elements": "0.75363", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-6721" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6721", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6721" }, { "reference_url": "https://github.com/bcgit/bc-java", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/bcgit/bc-java" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6721", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6721" }, { "reference_url": "https://web.archive.org/web/20071022023551/http://www.bouncycastle.org/csharp", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20071022023551/http://www.bouncycastle.org/csharp" }, { "reference_url": "https://web.archive.org/web/20071022023551/http://www.bouncycastle.org/csharp/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://web.archive.org/web/20071022023551/http://www.bouncycastle.org/csharp/" }, { "reference_url": "https://web.archive.org/web/20080316202318/http://www.bouncycastle.org:80/releasenotes.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20080316202318/http://www.bouncycastle.org:80/releasenotes.html" }, { "reference_url": "http://www.bouncycastle.org/devmailarchive/msg08195.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.bouncycastle.org/devmailarchive/msg08195.html" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=494053", "reference_id": "494053", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=494053" }, { "reference_url": "https://github.com/advisories/GHSA-m26p-m559-g5j5", "reference_id": "GHSA-m26p-m559-g5j5", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m26p-m559-g5j5" } ], "weaknesses": [ { "cwe_id": 203, "name": "Observable Discrepancy", "description": "The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not." } ], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z6hn-789k-dbgj" }