Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6894?format=api",
    "vulnerability_id": "VCID-2ts9-tzvs-tkck",
    "summary": "A remote code execution vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could execute code on the user's system.",
    "aliases": [
        {
            "alias": "CVE-2020-17106"
        },
        {
            "alias": " FEYE-2020-0013"
        }
    ],
    "fixed_packages": [],
    "affected_packages": [],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-17106",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.09677",
                    "scoring_system": "epss",
                    "scoring_elements": "0.93041",
                    "published_at": "2026-05-30T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-17106"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": null,
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2ts9-tzvs-tkck"
}