Lookup for vulnerable packages by Package URL.

GET /api/packages/1038200?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/1038200?format=api",
    "purl": "pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1",
    "type": "deb",
    "namespace": "debian",
    "name": "vlc",
    "version": "3.0.17.4-0+deb10u1",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": "3.0.23-0+deb12u1",
    "latest_non_vulnerable_version": "3.0.23-0+deb12u1",
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96749?format=api",
            "vulnerability_id": "VCID-4cqm-15gx-p7gr",
            "summary": "mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-51602",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.04098",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.03978",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.03961",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.03973",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.03992",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.04009",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.04023",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.04029",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.04047",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.0402",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00017",
                            "scoring_system": "epss",
                            "scoring_elements": "0.04005",
                            "published_at": "2026-04-12T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-51602"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-51602",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-51602"
                },
                {
                    "reference_url": "https://code.videolan.org/videolan/vlc/-/issues/29146",
                    "reference_id": "29146",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L"
                        },
                        {
                            "value": "Track",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-20T17:35:28Z/"
                        }
                    ],
                    "url": "https://code.videolan.org/videolan/vlc/-/issues/29146"
                },
                {
                    "reference_url": "https://www.videolan.org/security/sb-vlc3022.html",
                    "reference_id": "sb-vlc3022.html",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L"
                        },
                        {
                            "value": "Track",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-20T17:35:28Z/"
                        }
                    ],
                    "url": "https://www.videolan.org/security/sb-vlc3022.html"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1055424?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.23-0%2Bdeb12u1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-0%252Bdeb12u1"
                }
            ],
            "aliases": [
                "CVE-2025-51602"
            ],
            "risk_score": 1.2,
            "exploitability": "0.5",
            "weighted_severity": "2.4",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4cqm-15gx-p7gr"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/91009?format=api",
            "vulnerability_id": "VCID-6dcw-jpgp-gbar",
            "summary": "security update",
            "references": [],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1050038?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1"
                }
            ],
            "aliases": [
                "DSA-5165-1 vlc"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6dcw-jpgp-gbar"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/95791?format=api",
            "vulnerability_id": "VCID-cq5y-qzyq-mkbm",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-47359",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00164",
                            "scoring_system": "epss",
                            "scoring_elements": "0.37495",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00164",
                            "scoring_system": "epss",
                            "scoring_elements": "0.37519",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00164",
                            "scoring_system": "epss",
                            "scoring_elements": "0.37348",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00164",
                            "scoring_system": "epss",
                            "scoring_elements": "0.37399",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00164",
                            "scoring_system": "epss",
                            "scoring_elements": "0.37412",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00164",
                            "scoring_system": "epss",
                            "scoring_elements": "0.37424",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00164",
                            "scoring_system": "epss",
                            "scoring_elements": "0.37389",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00164",
                            "scoring_system": "epss",
                            "scoring_elements": "0.37362",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00164",
                            "scoring_system": "epss",
                            "scoring_elements": "0.37408",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00164",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3739",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00164",
                            "scoring_system": "epss",
                            "scoring_elements": "0.37334",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-47359"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47359",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47359"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47360",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47360"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6783-1/",
                    "reference_id": "USN-6783-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6783-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1050038?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1"
                }
            ],
            "aliases": [
                "CVE-2023-47359"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cq5y-qzyq-mkbm"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96217?format=api",
            "vulnerability_id": "VCID-g8tx-7ssq-pqb4",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-46461",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00353",
                            "scoring_system": "epss",
                            "scoring_elements": "0.57667",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00353",
                            "scoring_system": "epss",
                            "scoring_elements": "0.57692",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00353",
                            "scoring_system": "epss",
                            "scoring_elements": "0.57688",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00353",
                            "scoring_system": "epss",
                            "scoring_elements": "0.57634",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00353",
                            "scoring_system": "epss",
                            "scoring_elements": "0.57656",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00353",
                            "scoring_system": "epss",
                            "scoring_elements": "0.57632",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00353",
                            "scoring_system": "epss",
                            "scoring_elements": "0.57686",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00353",
                            "scoring_system": "epss",
                            "scoring_elements": "0.57689",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00353",
                            "scoring_system": "epss",
                            "scoring_elements": "0.57704",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00353",
                            "scoring_system": "epss",
                            "scoring_elements": "0.57683",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00353",
                            "scoring_system": "epss",
                            "scoring_elements": "0.57663",
                            "published_at": "2026-04-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-46461"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46461",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46461"
                },
                {
                    "reference_url": "https://www.videolan.org/security/sb-vlc3021.html",
                    "reference_id": "sb-vlc3021.html",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Track",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-25T15:37:59Z/"
                        }
                    ],
                    "url": "https://www.videolan.org/security/sb-vlc3021.html"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/7243-1/",
                    "reference_id": "USN-7243-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/7243-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1050038?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1"
                }
            ],
            "aliases": [
                "CVE-2024-46461"
            ],
            "risk_score": 2.0,
            "exploitability": "0.5",
            "weighted_severity": "4.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-g8tx-7ssq-pqb4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/95792?format=api",
            "vulnerability_id": "VCID-qq2u-797n-w7h4",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-47360",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26299",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2634",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26111",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26179",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26227",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26234",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26189",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2613",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26135",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26112",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26075",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-47360"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47359",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47359"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47360",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47360"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6783-1/",
                    "reference_id": "USN-6783-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6783-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1050038?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1"
                }
            ],
            "aliases": [
                "CVE-2023-47360"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qq2u-797n-w7h4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61650?format=api",
            "vulnerability_id": "VCID-zep1-wtjy-gya6",
            "summary": "Multiple vulnerabilities have been discovered in VLC, the worst of which could result in arbitrary code execution.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41325",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00076",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22968",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00076",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23012",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00076",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22804",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00081",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2396",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00081",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24006",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00081",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23932",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00081",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23923",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00081",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23979",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00081",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24022",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00081",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23921",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00081",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23903",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41325"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41325",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41325"
                },
                {
                    "reference_url": "https://twitter.com/0xMitsurugi",
                    "reference_id": "0xMitsurugi",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Track*",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-23T19:35:16Z/"
                        }
                    ],
                    "url": "https://twitter.com/0xMitsurugi"
                },
                {
                    "reference_url": "https://www.debian.org/security/2022/dsa-5297",
                    "reference_id": "dsa-5297",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Track*",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-23T19:35:16Z/"
                        }
                    ],
                    "url": "https://www.debian.org/security/2022/dsa-5297"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202409-17",
                    "reference_id": "GLSA-202409-17",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202409-17"
                },
                {
                    "reference_url": "https://www.videolan.org/security/sb-vlc3018.html",
                    "reference_id": "sb-vlc3018.html",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Track*",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-23T19:35:16Z/"
                        }
                    ],
                    "url": "https://www.videolan.org/security/sb-vlc3018.html"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6180-1/",
                    "reference_id": "USN-6180-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6180-1/"
                },
                {
                    "reference_url": "https://www.synacktiv.com/sites/default/files/2022-11/vlc_vnc_int_overflow-CVE-2022-41325.pdf",
                    "reference_id": "vlc_vnc_int_overflow-CVE-2022-41325.pdf",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Track*",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-23T19:35:16Z/"
                        }
                    ],
                    "url": "https://www.synacktiv.com/sites/default/files/2022-11/vlc_vnc_int_overflow-CVE-2022-41325.pdf"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1050038?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1"
                }
            ],
            "aliases": [
                "CVE-2022-41325"
            ],
            "risk_score": 2.8,
            "exploitability": "0.5",
            "weighted_severity": "5.5",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zep1-wtjy-gya6"
        }
    ],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/90915?format=api",
            "vulnerability_id": "VCID-24xa-1hn8-rkbe",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25804",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01001",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76935",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.01001",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76941",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.01001",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76971",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.01001",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76953",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.01001",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76985",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.01001",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76996",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.01001",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77023",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.01001",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77002",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.01001",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76997",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.01001",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77038",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.01001",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7704",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.01001",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77033",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25804"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6180-1/",
                    "reference_id": "USN-6180-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6180-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1038200?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        },
                        {
                            "vulnerability": "VCID-6dcw-jpgp-gbar"
                        },
                        {
                            "vulnerability": "VCID-cq5y-qzyq-mkbm"
                        },
                        {
                            "vulnerability": "VCID-g8tx-7ssq-pqb4"
                        },
                        {
                            "vulnerability": "VCID-qq2u-797n-w7h4"
                        },
                        {
                            "vulnerability": "VCID-zep1-wtjy-gya6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1"
                }
            ],
            "aliases": [
                "CVE-2021-25804"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-24xa-1hn8-rkbe"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/91009?format=api",
            "vulnerability_id": "VCID-6dcw-jpgp-gbar",
            "summary": "security update",
            "references": [],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1038200?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        },
                        {
                            "vulnerability": "VCID-6dcw-jpgp-gbar"
                        },
                        {
                            "vulnerability": "VCID-cq5y-qzyq-mkbm"
                        },
                        {
                            "vulnerability": "VCID-g8tx-7ssq-pqb4"
                        },
                        {
                            "vulnerability": "VCID-qq2u-797n-w7h4"
                        },
                        {
                            "vulnerability": "VCID-zep1-wtjy-gya6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1050038?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1"
                }
            ],
            "aliases": [
                "DSA-5165-1 vlc"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6dcw-jpgp-gbar"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/79758?format=api",
            "vulnerability_id": "VCID-b7as-3kmj-1udd",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-13428",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0692",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91358",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.0692",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91363",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.0692",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91374",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.0692",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91381",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.0692",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91393",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.0692",
                            "scoring_system": "epss",
                            "scoring_elements": "0.914",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.0692",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91406",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.0692",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91409",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.0692",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91408",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.0692",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91433",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.0692",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91429",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.0692",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9143",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-13428"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13428",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13428"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6180-1/",
                    "reference_id": "USN-6180-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6180-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1036932?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-24xa-1hn8-rkbe"
                        },
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        },
                        {
                            "vulnerability": "VCID-6dcw-jpgp-gbar"
                        },
                        {
                            "vulnerability": "VCID-b7as-3kmj-1udd"
                        },
                        {
                            "vulnerability": "VCID-cq5y-qzyq-mkbm"
                        },
                        {
                            "vulnerability": "VCID-d9ab-kte8-pkhk"
                        },
                        {
                            "vulnerability": "VCID-g8tx-7ssq-pqb4"
                        },
                        {
                            "vulnerability": "VCID-h7tu-k4wc-gbhz"
                        },
                        {
                            "vulnerability": "VCID-qq2u-797n-w7h4"
                        },
                        {
                            "vulnerability": "VCID-rygp-vyhd-x7f7"
                        },
                        {
                            "vulnerability": "VCID-z8s5-5uwe-auf4"
                        },
                        {
                            "vulnerability": "VCID-zep1-wtjy-gya6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1038200?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        },
                        {
                            "vulnerability": "VCID-6dcw-jpgp-gbar"
                        },
                        {
                            "vulnerability": "VCID-cq5y-qzyq-mkbm"
                        },
                        {
                            "vulnerability": "VCID-g8tx-7ssq-pqb4"
                        },
                        {
                            "vulnerability": "VCID-qq2u-797n-w7h4"
                        },
                        {
                            "vulnerability": "VCID-zep1-wtjy-gya6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1"
                }
            ],
            "aliases": [
                "CVE-2020-13428"
            ],
            "risk_score": 0.1,
            "exploitability": "0.5",
            "weighted_severity": "0.1",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b7as-3kmj-1udd"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/90912?format=api",
            "vulnerability_id": "VCID-d9ab-kte8-pkhk",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25801",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.02633",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85617",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.02633",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85629",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.02633",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85646",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.02633",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85653",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.02633",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85673",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.02633",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85684",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.02633",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85699",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.02633",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85695",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.02633",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85691",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.02633",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85713",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.02633",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85718",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.02633",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85712",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25801"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6180-1/",
                    "reference_id": "USN-6180-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6180-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1038200?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        },
                        {
                            "vulnerability": "VCID-6dcw-jpgp-gbar"
                        },
                        {
                            "vulnerability": "VCID-cq5y-qzyq-mkbm"
                        },
                        {
                            "vulnerability": "VCID-g8tx-7ssq-pqb4"
                        },
                        {
                            "vulnerability": "VCID-qq2u-797n-w7h4"
                        },
                        {
                            "vulnerability": "VCID-zep1-wtjy-gya6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1"
                }
            ],
            "aliases": [
                "CVE-2021-25801"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d9ab-kte8-pkhk"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/90913?format=api",
            "vulnerability_id": "VCID-h7tu-k4wc-gbhz",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25802",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51496",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51547",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51574",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51536",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.5159",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51586",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51636",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51615",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51599",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.5164",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51647",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51626",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25802"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6180-1/",
                    "reference_id": "USN-6180-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6180-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1038200?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        },
                        {
                            "vulnerability": "VCID-6dcw-jpgp-gbar"
                        },
                        {
                            "vulnerability": "VCID-cq5y-qzyq-mkbm"
                        },
                        {
                            "vulnerability": "VCID-g8tx-7ssq-pqb4"
                        },
                        {
                            "vulnerability": "VCID-qq2u-797n-w7h4"
                        },
                        {
                            "vulnerability": "VCID-zep1-wtjy-gya6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1"
                }
            ],
            "aliases": [
                "CVE-2021-25802"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h7tu-k4wc-gbhz"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/90914?format=api",
            "vulnerability_id": "VCID-rygp-vyhd-x7f7",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25803",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51496",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51547",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51574",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51536",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.5159",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51586",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51636",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51615",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51599",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.5164",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51647",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00282",
                            "scoring_system": "epss",
                            "scoring_elements": "0.51626",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25803"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6180-1/",
                    "reference_id": "USN-6180-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6180-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1038200?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        },
                        {
                            "vulnerability": "VCID-6dcw-jpgp-gbar"
                        },
                        {
                            "vulnerability": "VCID-cq5y-qzyq-mkbm"
                        },
                        {
                            "vulnerability": "VCID-g8tx-7ssq-pqb4"
                        },
                        {
                            "vulnerability": "VCID-qq2u-797n-w7h4"
                        },
                        {
                            "vulnerability": "VCID-zep1-wtjy-gya6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1"
                }
            ],
            "aliases": [
                "CVE-2021-25803"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rygp-vyhd-x7f7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35999?format=api",
            "vulnerability_id": "VCID-z8s5-5uwe-auf4",
            "summary": "A buffer overflow in VLC might allow remote attacker(s) to execute\n    arbitrary code.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-26664",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.52968",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.52858",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.52884",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.5291",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.52878",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.52929",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.52922",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.52972",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.52957",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.5294",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.52978",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.52984",
                            "published_at": "2026-04-18T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-26664"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979676",
                    "reference_id": "979676",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979676"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-202101-35",
                    "reference_id": "ASA-202101-35",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-202101-35"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-1423",
                    "reference_id": "AVG-1423",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Medium",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-1423"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202101-37",
                    "reference_id": "GLSA-202101-37",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202101-37"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1038200?format=api",
                    "purl": "pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-4cqm-15gx-p7gr"
                        },
                        {
                            "vulnerability": "VCID-6dcw-jpgp-gbar"
                        },
                        {
                            "vulnerability": "VCID-cq5y-qzyq-mkbm"
                        },
                        {
                            "vulnerability": "VCID-g8tx-7ssq-pqb4"
                        },
                        {
                            "vulnerability": "VCID-qq2u-797n-w7h4"
                        },
                        {
                            "vulnerability": "VCID-zep1-wtjy-gya6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1"
                }
            ],
            "aliases": [
                "CVE-2020-26664"
            ],
            "risk_score": 3.1,
            "exploitability": "0.5",
            "weighted_severity": "6.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z8s5-5uwe-auf4"
        }
    ],
    "risk_score": "2.8",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1"
}