Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/89027?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/89027?format=api",
    "vulnerability_id": "VCID-qxq6-bxev-bbh8",
    "summary": "security flaw",
    "aliases": [
        {
            "alias": "CVE-2005-2456"
        }
    ],
    "fixed_packages": [],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/129835?format=api",
            "purl": "pkg:rpm/redhat/kernel@2.4.21-37?arch=EL",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-3grb-gvqh-akhw"
                },
                {
                    "vulnerability": "VCID-3rt8-k21g-ykeh"
                },
                {
                    "vulnerability": "VCID-5jz8-xthb-ufdn"
                },
                {
                    "vulnerability": "VCID-5mg6-y7tb-wuda"
                },
                {
                    "vulnerability": "VCID-5p17-f8g3-nqht"
                },
                {
                    "vulnerability": "VCID-eh9v-gsz4-wfau"
                },
                {
                    "vulnerability": "VCID-f71c-but2-wyhv"
                },
                {
                    "vulnerability": "VCID-gehe-bhxf-23bx"
                },
                {
                    "vulnerability": "VCID-jghv-5719-5fb2"
                },
                {
                    "vulnerability": "VCID-jhfq-1pfj-quef"
                },
                {
                    "vulnerability": "VCID-jk2q-esbq-fqf2"
                },
                {
                    "vulnerability": "VCID-jrpe-psfg-yudm"
                },
                {
                    "vulnerability": "VCID-qxq6-bxev-bbh8"
                },
                {
                    "vulnerability": "VCID-s2mf-et67-c3ac"
                },
                {
                    "vulnerability": "VCID-sf76-1jqh-hyc8"
                },
                {
                    "vulnerability": "VCID-u1cx-n1ud-8qdm"
                },
                {
                    "vulnerability": "VCID-vked-f81k-bkgw"
                },
                {
                    "vulnerability": "VCID-xzy3-3aaj-bqcc"
                },
                {
                    "vulnerability": "VCID-ypba-bn9u-6kg3"
                },
                {
                    "vulnerability": "VCID-zxb5-nkbs-cqc7"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kernel@2.4.21-37%3Farch=EL"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/130202?format=api",
            "purl": "pkg:rpm/redhat/kernel@2.6.9-22?arch=EL",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-3grb-gvqh-akhw"
                },
                {
                    "vulnerability": "VCID-5mg6-y7tb-wuda"
                },
                {
                    "vulnerability": "VCID-83wk-1xrw-v7f3"
                },
                {
                    "vulnerability": "VCID-ch22-g24x-kqck"
                },
                {
                    "vulnerability": "VCID-dyah-tvap-f7eg"
                },
                {
                    "vulnerability": "VCID-e5xh-qzjn-xqg2"
                },
                {
                    "vulnerability": "VCID-er8h-9nyr-bfbp"
                },
                {
                    "vulnerability": "VCID-gehe-bhxf-23bx"
                },
                {
                    "vulnerability": "VCID-hma8-r5tw-83em"
                },
                {
                    "vulnerability": "VCID-n7x2-kzwv-2yd3"
                },
                {
                    "vulnerability": "VCID-pd1h-w7qc-n7cx"
                },
                {
                    "vulnerability": "VCID-qxq6-bxev-bbh8"
                },
                {
                    "vulnerability": "VCID-rjrz-h6jy-jkfr"
                },
                {
                    "vulnerability": "VCID-s2mf-et67-c3ac"
                },
                {
                    "vulnerability": "VCID-t2t2-y55a-9bgv"
                },
                {
                    "vulnerability": "VCID-vked-f81k-bkgw"
                },
                {
                    "vulnerability": "VCID-vnfm-qem6-y3cq"
                },
                {
                    "vulnerability": "VCID-xzy3-3aaj-bqcc"
                },
                {
                    "vulnerability": "VCID-zc4r-7w7g-c7eg"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kernel@2.6.9-22%3Farch=EL"
        }
    ],
    "references": [
        {
            "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2456.json",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2456.json"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2005-2456",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.29847",
                    "published_at": "2026-05-07T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.29912",
                    "published_at": "2026-04-29T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.29777",
                    "published_at": "2026-05-05T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.30316",
                    "published_at": "2026-04-01T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.30344",
                    "published_at": "2026-04-02T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.30392",
                    "published_at": "2026-04-04T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.30207",
                    "published_at": "2026-04-07T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.30266",
                    "published_at": "2026-04-08T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.30301",
                    "published_at": "2026-04-09T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.30305",
                    "published_at": "2026-04-11T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.30262",
                    "published_at": "2026-04-12T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.30215",
                    "published_at": "2026-04-13T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.3023",
                    "published_at": "2026-04-16T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.30211",
                    "published_at": "2026-04-18T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.30167",
                    "published_at": "2026-04-21T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.30097",
                    "published_at": "2026-04-24T12:55:00Z"
                },
                {
                    "value": "0.00116",
                    "scoring_system": "epss",
                    "scoring_elements": "0.29981",
                    "published_at": "2026-04-26T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2005-2456"
        },
        {
            "reference_url": "http://secunia.com/advisories/16298",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://secunia.com/advisories/16298"
        },
        {
            "reference_url": "http://secunia.com/advisories/16500",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://secunia.com/advisories/16500"
        },
        {
            "reference_url": "http://secunia.com/advisories/17002",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://secunia.com/advisories/17002"
        },
        {
            "reference_url": "http://secunia.com/advisories/17073",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://secunia.com/advisories/17073"
        },
        {
            "reference_url": "http://secunia.com/advisories/17826",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://secunia.com/advisories/17826"
        },
        {
            "reference_url": "http://secunia.com/advisories/18056",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://secunia.com/advisories/18056"
        },
        {
            "reference_url": "http://secunia.com/advisories/18059",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://secunia.com/advisories/18059"
        },
        {
            "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21710",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21710"
        },
        {
            "reference_url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10858",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10858"
        },
        {
            "reference_url": "http://www.debian.org/security/2005/dsa-921",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.debian.org/security/2005/dsa-921"
        },
        {
            "reference_url": "http://www.debian.org/security/2005/dsa-922",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.debian.org/security/2005/dsa-922"
        },
        {
            "reference_url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=8da3e25b2c4c1f305fd85428d3a9eb62b543bfba%3Bhp=ecade4893a139cc35d4fe345ce70242ede5358c4%3Bhb=a4f1bac62564049ea4718c4624b0fadc9f597c84%3Bf=net/xfrm/xfrm_user.c",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=8da3e25b2c4c1f305fd85428d3a9eb62b543bfba%3Bhp=ecade4893a139cc35d4fe345ce70242ede5358c4%3Bhb=a4f1bac62564049ea4718c4624b0fadc9f597c84%3Bf=net/xfrm/xfrm_user.c"
        },
        {
            "reference_url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a4f1bac62564049ea4718c4624b0fadc9f597c84",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a4f1bac62564049ea4718c4624b0fadc9f597c84"
        },
        {
            "reference_url": "http://www.mail-archive.com/netdev%40vger.kernel.org/msg00520.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.mail-archive.com/netdev%40vger.kernel.org/msg00520.html"
        },
        {
            "reference_url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219"
        },
        {
            "reference_url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220"
        },
        {
            "reference_url": "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.novell.com/linux/security/advisories/2005_50_kernel.html"
        },
        {
            "reference_url": "http://www.redhat.com/support/errata/RHSA-2005-514.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-514.html"
        },
        {
            "reference_url": "http://www.redhat.com/support/errata/RHSA-2005-663.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-663.html"
        },
        {
            "reference_url": "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.securityfocus.com/archive/1/427980/100/0/threaded"
        },
        {
            "reference_url": "http://www.securityfocus.com/bid/14477",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.securityfocus.com/bid/14477"
        },
        {
            "reference_url": "http://www.vupen.com/english/advisories/2005/1878",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.vupen.com/english/advisories/2005/1878"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617719",
            "reference_id": "1617719",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617719"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2456",
            "reference_id": "CVE-2005-2456",
            "reference_type": "",
            "scores": [
                {
                    "value": "2.1",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:L/AC:L/Au:N/C:N/I:N/A:P"
                },
                {
                    "value": "5.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2456"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2005:514",
            "reference_id": "RHSA-2005:514",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2005:514"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2005:663",
            "reference_id": "RHSA-2005:663",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2005:663"
        },
        {
            "reference_url": "https://usn.ubuntu.com/169-1/",
            "reference_id": "USN-169-1",
            "reference_type": "",
            "scores": [],
            "url": "https://usn.ubuntu.com/169-1/"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 667,
            "name": "Improper Locking",
            "description": "The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors."
        }
    ],
    "exploits": [],
    "severity_range_score": "2.1 - 5.5",
    "exploitability": "0.5",
    "weighted_severity": "5.0",
    "risk_score": 2.5,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qxq6-bxev-bbh8"
}