GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/6185?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6185?format=api",
    "vulnerability_id": "VCID-gue4-gwmq-cud9",
    "summary": "multiple issues",
    "aliases": [
        {
            "alias": "CVE-2019-1000019"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/2927?format=api",
            "purl": "pkg:alpm/archlinux/libarchive@3.4.0-1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/libarchive@3.4.0-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5592?format=api",
            "purl": "pkg:deb/debian/libarchive@3.3.3-4%2Bdeb10u1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libarchive@3.3.3-4%252Bdeb10u1"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/2926?format=api",
            "purl": "pkg:alpm/archlinux/libarchive@3.3.3-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4t89-41bc-3ba8"
                },
                {
                    "vulnerability": "VCID-gu6c-aam9-9bfs"
                },
                {
                    "vulnerability": "VCID-gue4-gwmq-cud9"
                },
                {
                    "vulnerability": "VCID-jpyc-ymx3-uuhh"
                },
                {
                    "vulnerability": "VCID-k2jw-vx9c-1bg3"
                },
                {
                    "vulnerability": "VCID-n56c-gd3f-1ba1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/libarchive@3.3.3-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4983?format=api",
            "purl": "pkg:deb/debian/libarchive@1.2.53-2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4t89-41bc-3ba8"
                },
                {
                    "vulnerability": "VCID-gu6c-aam9-9bfs"
                },
                {
                    "vulnerability": "VCID-gue4-gwmq-cud9"
                },
                {
                    "vulnerability": "VCID-jpyc-ymx3-uuhh"
                },
                {
                    "vulnerability": "VCID-k2jw-vx9c-1bg3"
                },
                {
                    "vulnerability": "VCID-n56c-gd3f-1ba1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libarchive@1.2.53-2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4984?format=api",
            "purl": "pkg:deb/debian/libarchive@1.2.53-2etch1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4t89-41bc-3ba8"
                },
                {
                    "vulnerability": "VCID-gu6c-aam9-9bfs"
                },
                {
                    "vulnerability": "VCID-gue4-gwmq-cud9"
                },
                {
                    "vulnerability": "VCID-jpyc-ymx3-uuhh"
                },
                {
                    "vulnerability": "VCID-k2jw-vx9c-1bg3"
                },
                {
                    "vulnerability": "VCID-n56c-gd3f-1ba1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libarchive@1.2.53-2etch1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4985?format=api",
            "purl": "pkg:deb/debian/libarchive@2.4.17-2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4t89-41bc-3ba8"
                },
                {
                    "vulnerability": "VCID-gu6c-aam9-9bfs"
                },
                {
                    "vulnerability": "VCID-gue4-gwmq-cud9"
                },
                {
                    "vulnerability": "VCID-jpyc-ymx3-uuhh"
                },
                {
                    "vulnerability": "VCID-k2jw-vx9c-1bg3"
                },
                {
                    "vulnerability": "VCID-n56c-gd3f-1ba1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libarchive@2.4.17-2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4986?format=api",
            "purl": "pkg:deb/debian/libarchive@2.8.4.forreal-1%2Bsqueeze2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4t89-41bc-3ba8"
                },
                {
                    "vulnerability": "VCID-gu6c-aam9-9bfs"
                },
                {
                    "vulnerability": "VCID-gue4-gwmq-cud9"
                },
                {
                    "vulnerability": "VCID-jpyc-ymx3-uuhh"
                },
                {
                    "vulnerability": "VCID-k2jw-vx9c-1bg3"
                },
                {
                    "vulnerability": "VCID-n56c-gd3f-1ba1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libarchive@2.8.4.forreal-1%252Bsqueeze2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4987?format=api",
            "purl": "pkg:deb/debian/libarchive@2.8.4.forreal-1%2Bsqueeze3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4t89-41bc-3ba8"
                },
                {
                    "vulnerability": "VCID-gu6c-aam9-9bfs"
                },
                {
                    "vulnerability": "VCID-gue4-gwmq-cud9"
                },
                {
                    "vulnerability": "VCID-jpyc-ymx3-uuhh"
                },
                {
                    "vulnerability": "VCID-k2jw-vx9c-1bg3"
                },
                {
                    "vulnerability": "VCID-n56c-gd3f-1ba1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libarchive@2.8.4.forreal-1%252Bsqueeze3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4988?format=api",
            "purl": "pkg:deb/debian/libarchive@3.0.4-3%2Bwheezy1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4t89-41bc-3ba8"
                },
                {
                    "vulnerability": "VCID-gu6c-aam9-9bfs"
                },
                {
                    "vulnerability": "VCID-gue4-gwmq-cud9"
                },
                {
                    "vulnerability": "VCID-jpyc-ymx3-uuhh"
                },
                {
                    "vulnerability": "VCID-k2jw-vx9c-1bg3"
                },
                {
                    "vulnerability": "VCID-n56c-gd3f-1ba1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libarchive@3.0.4-3%252Bwheezy1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4989?format=api",
            "purl": "pkg:deb/debian/libarchive@3.1.2-8~bpo70%2B1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4t89-41bc-3ba8"
                },
                {
                    "vulnerability": "VCID-gu6c-aam9-9bfs"
                },
                {
                    "vulnerability": "VCID-gue4-gwmq-cud9"
                },
                {
                    "vulnerability": "VCID-jpyc-ymx3-uuhh"
                },
                {
                    "vulnerability": "VCID-k2jw-vx9c-1bg3"
                },
                {
                    "vulnerability": "VCID-n56c-gd3f-1ba1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libarchive@3.1.2-8~bpo70%252B1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4990?format=api",
            "purl": "pkg:deb/debian/libarchive@3.1.2-11",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4t89-41bc-3ba8"
                },
                {
                    "vulnerability": "VCID-gu6c-aam9-9bfs"
                },
                {
                    "vulnerability": "VCID-gue4-gwmq-cud9"
                },
                {
                    "vulnerability": "VCID-jpyc-ymx3-uuhh"
                },
                {
                    "vulnerability": "VCID-k2jw-vx9c-1bg3"
                },
                {
                    "vulnerability": "VCID-n56c-gd3f-1ba1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libarchive@3.1.2-11"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4991?format=api",
            "purl": "pkg:deb/debian/libarchive@3.1.2-11%2Bdeb8u3~bpo70%2B1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4t89-41bc-3ba8"
                },
                {
                    "vulnerability": "VCID-gu6c-aam9-9bfs"
                },
                {
                    "vulnerability": "VCID-gue4-gwmq-cud9"
                },
                {
                    "vulnerability": "VCID-jpyc-ymx3-uuhh"
                },
                {
                    "vulnerability": "VCID-k2jw-vx9c-1bg3"
                },
                {
                    "vulnerability": "VCID-n56c-gd3f-1ba1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libarchive@3.1.2-11%252Bdeb8u3~bpo70%252B1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4992?format=api",
            "purl": "pkg:deb/debian/libarchive@3.1.2-11%2Bdeb8u3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4t89-41bc-3ba8"
                },
                {
                    "vulnerability": "VCID-gu6c-aam9-9bfs"
                },
                {
                    "vulnerability": "VCID-gue4-gwmq-cud9"
                },
                {
                    "vulnerability": "VCID-jpyc-ymx3-uuhh"
                },
                {
                    "vulnerability": "VCID-k2jw-vx9c-1bg3"
                },
                {
                    "vulnerability": "VCID-n56c-gd3f-1ba1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libarchive@3.1.2-11%252Bdeb8u3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4993?format=api",
            "purl": "pkg:deb/debian/libarchive@3.2.2-2%2Bdeb9u2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4t89-41bc-3ba8"
                },
                {
                    "vulnerability": "VCID-gu6c-aam9-9bfs"
                },
                {
                    "vulnerability": "VCID-gue4-gwmq-cud9"
                },
                {
                    "vulnerability": "VCID-jpyc-ymx3-uuhh"
                },
                {
                    "vulnerability": "VCID-k2jw-vx9c-1bg3"
                },
                {
                    "vulnerability": "VCID-n56c-gd3f-1ba1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libarchive@3.2.2-2%252Bdeb9u2"
        }
    ],
    "references": [
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1000019",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1000019"
        },
        {
            "reference_url": "https://security.archlinux.org/ASA-201906-21",
            "reference_id": "ASA-201906-21",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-201906-21"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-837",
            "reference_id": "AVG-837",
            "reference_type": "",
            "scores": [
                {
                    "value": "High",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-837"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "7.0 - 8.9",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gue4-gwmq-cud9"
}