Lookup for vulnerable packages by Package URL.

GET /api/packages/183000?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/183000?format=api",
    "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1:1.6.0.0-1.43.1.10.6?arch=el6_2",
    "type": "rpm",
    "namespace": "redhat",
    "name": "java-1.6.0-openjdk",
    "version": "1:1.6.0.0-1.43.1.10.6",
    "qualifiers": {
        "arch": "el6_2"
    },
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": null,
    "latest_non_vulnerable_version": null,
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/115324?format=api",
            "vulnerability_id": "VCID-41vm-fbxs-e3bt",
            "summary": "OpenJDK: unrestricted use of TimeZone.setDefault() (i18n, 7110687)",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0503.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0503.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0503",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01983",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83903",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.01983",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83927",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.01983",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83929",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.01983",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83924",
                            "published_at": "2026-06-07T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0503"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=788976",
                    "reference_id": "788976",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=788976"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-30",
                    "reference_id": "GLSA-201401-30",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-30"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201406-32",
                    "reference_id": "GLSA-201406-32",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201406-32"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0135",
                    "reference_id": "RHSA-2012:0135",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0135"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0139",
                    "reference_id": "RHSA-2012:0139",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0139"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0322",
                    "reference_id": "RHSA-2012:0322",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0322"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0508",
                    "reference_id": "RHSA-2012:0508",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0508"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0514",
                    "reference_id": "RHSA-2012:0514",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0514"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0702",
                    "reference_id": "RHSA-2012:0702",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0702"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1080",
                    "reference_id": "RHSA-2012:1080",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1080"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:1455",
                    "reference_id": "RHSA-2013:1455",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:1455"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-1/",
                    "reference_id": "USN-1373-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-2/",
                    "reference_id": "USN-1373-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-2/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0503"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-41vm-fbxs-e3bt"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/115330?format=api",
            "vulnerability_id": "VCID-63s9-sx21-77b2",
            "summary": "OpenJDK: mutable repository identifiers (CORBA, 7110704)",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0506.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0506.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0506",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01485",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81357",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.01485",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81385",
                            "published_at": "2026-06-07T12:55:00Z"
                        },
                        {
                            "value": "0.01485",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81387",
                            "published_at": "2026-06-06T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0506"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=789300",
                    "reference_id": "789300",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=789300"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-30",
                    "reference_id": "GLSA-201401-30",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-30"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201406-32",
                    "reference_id": "GLSA-201406-32",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201406-32"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0135",
                    "reference_id": "RHSA-2012:0135",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0135"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0139",
                    "reference_id": "RHSA-2012:0139",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0139"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0322",
                    "reference_id": "RHSA-2012:0322",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0322"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0508",
                    "reference_id": "RHSA-2012:0508",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0508"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0514",
                    "reference_id": "RHSA-2012:0514",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0514"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0702",
                    "reference_id": "RHSA-2012:0702",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0702"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1080",
                    "reference_id": "RHSA-2012:1080",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1080"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:1455",
                    "reference_id": "RHSA-2013:1455",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:1455"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-1/",
                    "reference_id": "USN-1373-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-2/",
                    "reference_id": "USN-1373-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-2/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0506"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-63s9-sx21-77b2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/115328?format=api",
            "vulnerability_id": "VCID-6pr7-qry7-63f6",
            "summary": "OpenJDK: KeyboardFocusManager focus stealing (AWT, 7110683)",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0502.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0502.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0502",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01874",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83464",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.01874",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83489",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.01874",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83491",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.01874",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83487",
                            "published_at": "2026-06-07T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0502"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=789297",
                    "reference_id": "789297",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=789297"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-30",
                    "reference_id": "GLSA-201401-30",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-30"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201406-32",
                    "reference_id": "GLSA-201406-32",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201406-32"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0135",
                    "reference_id": "RHSA-2012:0135",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0135"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0139",
                    "reference_id": "RHSA-2012:0139",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0139"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0322",
                    "reference_id": "RHSA-2012:0322",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0322"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0508",
                    "reference_id": "RHSA-2012:0508",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0508"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0514",
                    "reference_id": "RHSA-2012:0514",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0514"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0702",
                    "reference_id": "RHSA-2012:0702",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0702"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1080",
                    "reference_id": "RHSA-2012:1080",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1080"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:1455",
                    "reference_id": "RHSA-2013:1455",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:1455"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-1/",
                    "reference_id": "USN-1373-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-2/",
                    "reference_id": "USN-1373-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-2/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0502"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6pr7-qry7-63f6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/115329?format=api",
            "vulnerability_id": "VCID-9zpp-scjc-s7bz",
            "summary": "OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700)",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0505.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0505.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0505",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01983",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83903",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.01983",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83927",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.01983",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83929",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.01983",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83924",
                            "published_at": "2026-06-07T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0505"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=789299",
                    "reference_id": "789299",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=789299"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-30",
                    "reference_id": "GLSA-201401-30",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-30"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201406-32",
                    "reference_id": "GLSA-201406-32",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201406-32"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0135",
                    "reference_id": "RHSA-2012:0135",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0135"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0139",
                    "reference_id": "RHSA-2012:0139",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0139"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0322",
                    "reference_id": "RHSA-2012:0322",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0322"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0508",
                    "reference_id": "RHSA-2012:0508",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0508"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0514",
                    "reference_id": "RHSA-2012:0514",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0514"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0702",
                    "reference_id": "RHSA-2012:0702",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0702"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1080",
                    "reference_id": "RHSA-2012:1080",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1080"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:1455",
                    "reference_id": "RHSA-2013:1455",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:1455"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-1/",
                    "reference_id": "USN-1373-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-2/",
                    "reference_id": "USN-1373-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-2/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0505"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9zpp-scjc-s7bz"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/115325?format=api",
            "vulnerability_id": "VCID-c9cd-pxgf-eff2",
            "summary": "OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3571.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3571.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3571",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00256",
                            "scoring_system": "epss",
                            "scoring_elements": "0.49157",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.00256",
                            "scoring_system": "epss",
                            "scoring_elements": "0.49218",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.00256",
                            "scoring_system": "epss",
                            "scoring_elements": "0.49229",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.00256",
                            "scoring_system": "epss",
                            "scoring_elements": "0.49211",
                            "published_at": "2026-06-07T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3571"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=788994",
                    "reference_id": "788994",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=788994"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201406-32",
                    "reference_id": "GLSA-201406-32",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201406-32"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0135",
                    "reference_id": "RHSA-2012:0135",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0135"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0139",
                    "reference_id": "RHSA-2012:0139",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0139"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0322",
                    "reference_id": "RHSA-2012:0322",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0322"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2011-3571"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c9cd-pxgf-eff2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/115327?format=api",
            "vulnerability_id": "VCID-cj6z-hx1d-s3fx",
            "summary": "OpenJDK: JavaSound incorrect bounds check (Sound, 7088367)",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3563.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3563.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3563",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.05146",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90042",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.05146",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90057",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.05146",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90056",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.05146",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90054",
                            "published_at": "2026-06-07T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3563"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=789295",
                    "reference_id": "789295",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=789295"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-30",
                    "reference_id": "GLSA-201401-30",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-30"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201406-32",
                    "reference_id": "GLSA-201406-32",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201406-32"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0135",
                    "reference_id": "RHSA-2012:0135",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0135"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0139",
                    "reference_id": "RHSA-2012:0139",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0139"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0322",
                    "reference_id": "RHSA-2012:0322",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0322"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0508",
                    "reference_id": "RHSA-2012:0508",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0508"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0514",
                    "reference_id": "RHSA-2012:0514",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0514"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0702",
                    "reference_id": "RHSA-2012:0702",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0702"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1080",
                    "reference_id": "RHSA-2012:1080",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1080"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:1455",
                    "reference_id": "RHSA-2013:1455",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:1455"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-1/",
                    "reference_id": "USN-1373-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-2/",
                    "reference_id": "USN-1373-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-2/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2011-3563"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cj6z-hx1d-s3fx"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/115398?format=api",
            "vulnerability_id": "VCID-gpa3-1mr2-8ue8",
            "summary": "GlassFish: hash table collisions CPU usage DoS (oCERT-2011-003)",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5035.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5035.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-5035",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.58626",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98244",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.58626",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98246",
                            "published_at": "2026-06-07T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-5035"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=771283",
                    "reference_id": "771283",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771283"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-30",
                    "reference_id": "GLSA-201401-30",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-30"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201406-32",
                    "reference_id": "GLSA-201406-32",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201406-32"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0135",
                    "reference_id": "RHSA-2012:0135",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0135"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0139",
                    "reference_id": "RHSA-2012:0139",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0139"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0322",
                    "reference_id": "RHSA-2012:0322",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0322"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0514",
                    "reference_id": "RHSA-2012:0514",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0514"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:1455",
                    "reference_id": "RHSA-2013:1455",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:1455"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-1/",
                    "reference_id": "USN-1373-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-2/",
                    "reference_id": "USN-1373-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-2/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2011-5035"
            ],
            "risk_score": 1.0,
            "exploitability": "2.0",
            "weighted_severity": "0.5",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gpa3-1mr2-8ue8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/115326?format=api",
            "vulnerability_id": "VCID-h6ub-x67x-mye5",
            "summary": "OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0507.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0507.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0507",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.9358",
                            "scoring_system": "epss",
                            "scoring_elements": "0.99842",
                            "published_at": "2026-06-07T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0507"
                },
                {
                    "reference_url": "http://secunia.com/advisories/48589",
                    "reference_id": "48589",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://secunia.com/advisories/48589"
                },
                {
                    "reference_url": "http://secunia.com/advisories/48692",
                    "reference_id": "48692",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://secunia.com/advisories/48692"
                },
                {
                    "reference_url": "http://secunia.com/advisories/48915",
                    "reference_id": "48915",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://secunia.com/advisories/48915"
                },
                {
                    "reference_url": "http://secunia.com/advisories/48948",
                    "reference_id": "48948",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://secunia.com/advisories/48948"
                },
                {
                    "reference_url": "http://secunia.com/advisories/48950",
                    "reference_id": "48950",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://secunia.com/advisories/48950"
                },
                {
                    "reference_url": "http://www.securityfocus.com/bid/52161",
                    "reference_id": "52161",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://www.securityfocus.com/bid/52161"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=788994",
                    "reference_id": "788994",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=788994"
                },
                {
                    "reference_url": "http://blogs.technet.com/b/mmpc/archive/2012/03/20/an-interesting-case-of-jre-sandbox-breach-cve-2012-0507.aspx",
                    "reference_id": "an-interesting-case-of-jre-sandbox-breach-cve-2012-0507.aspx",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://blogs.technet.com/b/mmpc/archive/2012/03/20/an-interesting-case-of-jre-sandbox-breach-cve-2012-0507.aspx"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/18679.rb",
                    "reference_id": "CVE-2012-0507;OSVDB-80724",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/18679.rb"
                },
                {
                    "reference_url": "http://www.debian.org/security/2012/dsa-2420",
                    "reference_id": "dsa-2420",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://www.debian.org/security/2012/dsa-2420"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-30",
                    "reference_id": "GLSA-201401-30",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-30"
                },
                {
                    "reference_url": "http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html",
                    "reference_id": "javacpufeb2012-366318.html",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html"
                },
                {
                    "reference_url": "http://marc.info/?l=bugtraq&m=133364885411663&w=2",
                    "reference_id": "?l=bugtraq&m=133364885411663&w=2",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://marc.info/?l=bugtraq&m=133364885411663&w=2"
                },
                {
                    "reference_url": "http://marc.info/?l=bugtraq&m=133365109612558&w=2",
                    "reference_id": "?l=bugtraq&m=133365109612558&w=2",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://marc.info/?l=bugtraq&m=133365109612558&w=2"
                },
                {
                    "reference_url": "http://marc.info/?l=bugtraq&m=133847939902305&w=2",
                    "reference_id": "?l=bugtraq&m=133847939902305&w=2",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://marc.info/?l=bugtraq&m=133847939902305&w=2"
                },
                {
                    "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html",
                    "reference_id": "msg00009.html",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html"
                },
                {
                    "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html",
                    "reference_id": "msg00010.html",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html"
                },
                {
                    "reference_url": "http://krebsonsecurity.com/2012/03/new-java-attack-rolled-into-exploit-packs/",
                    "reference_id": "new-java-attack-rolled-into-exploit-packs",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://krebsonsecurity.com/2012/03/new-java-attack-rolled-into-exploit-packs/"
                },
                {
                    "reference_url": "http://weblog.ikvm.net/PermaLink.aspx?guid=cd48169a-9405-4f63-9087-798c4a1866d3",
                    "reference_id": "PermaLink.aspx?guid=cd48169a-9405-4f63-9087-798c4a1866d3",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://weblog.ikvm.net/PermaLink.aspx?guid=cd48169a-9405-4f63-9087-798c4a1866d3"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0135",
                    "reference_id": "RHSA-2012:0135",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0135"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0139",
                    "reference_id": "RHSA-2012:0139",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0139"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0322",
                    "reference_id": "RHSA-2012:0322",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0322"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0508",
                    "reference_id": "RHSA-2012:0508",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0508"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2012-0508.html",
                    "reference_id": "RHSA-2012-0508.html",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2012-0508.html"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0514",
                    "reference_id": "RHSA-2012:0514",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0514"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2012-0514.html",
                    "reference_id": "RHSA-2012-0514.html",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2012-0514.html"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:1455",
                    "reference_id": "RHSA-2013:1455",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:1455"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html",
                    "reference_id": "RHSA-2013-1455.html",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        },
                        {
                            "value": "Act",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T19:54:57Z/"
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-1/",
                    "reference_id": "USN-1373-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-2/",
                    "reference_id": "USN-1373-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-2/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0507"
            ],
            "risk_score": 10.0,
            "exploitability": "2.0",
            "weighted_severity": "8.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h6ub-x67x-mye5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/115331?format=api",
            "vulnerability_id": "VCID-k41p-svcr-cbfm",
            "summary": "OpenJDK: insufficient checking of the graphics rendering object (2D, 7112642)",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0497.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0497.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0497",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0484",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89711",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.0484",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89728",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.0484",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8973",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.0484",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89729",
                            "published_at": "2026-06-07T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0497"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=789301",
                    "reference_id": "789301",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=789301"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-30",
                    "reference_id": "GLSA-201401-30",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-30"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201406-32",
                    "reference_id": "GLSA-201406-32",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201406-32"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0135",
                    "reference_id": "RHSA-2012:0135",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0135"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0322",
                    "reference_id": "RHSA-2012:0322",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0322"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0514",
                    "reference_id": "RHSA-2012:0514",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0514"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:1455",
                    "reference_id": "RHSA-2013:1455",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:1455"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-1/",
                    "reference_id": "USN-1373-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-2/",
                    "reference_id": "USN-1373-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-2/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0497"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k41p-svcr-cbfm"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/115323?format=api",
            "vulnerability_id": "VCID-u5yp-7sth-xkeh",
            "summary": "OpenJDK: off-by-one bug in ZIP reading code (JRE, 7118283)",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0501.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0501.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0501",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.05146",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90042",
                            "published_at": "2026-06-04T12:55:00Z"
                        },
                        {
                            "value": "0.05146",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90057",
                            "published_at": "2026-06-05T12:55:00Z"
                        },
                        {
                            "value": "0.05146",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90056",
                            "published_at": "2026-06-06T12:55:00Z"
                        },
                        {
                            "value": "0.05146",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90054",
                            "published_at": "2026-06-07T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0501"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=788624",
                    "reference_id": "788624",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=788624"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-30",
                    "reference_id": "GLSA-201401-30",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-30"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201406-32",
                    "reference_id": "GLSA-201406-32",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201406-32"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0135",
                    "reference_id": "RHSA-2012:0135",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0135"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0139",
                    "reference_id": "RHSA-2012:0139",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0139"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0322",
                    "reference_id": "RHSA-2012:0322",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0322"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0508",
                    "reference_id": "RHSA-2012:0508",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0508"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0514",
                    "reference_id": "RHSA-2012:0514",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0514"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:1455",
                    "reference_id": "RHSA-2013:1455",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:1455"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-1/",
                    "reference_id": "USN-1373-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1373-2/",
                    "reference_id": "USN-1373-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1373-2/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0501"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u5yp-7sth-xkeh"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": "10.0",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.6.0-openjdk@1:1.6.0.0-1.43.1.10.6%3Farch=el6_2"
}