Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/288082?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/288082?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@0.19.0-M2", "type": "maven", "namespace": "org.http4s", "name": "http4s-core_2.12", "version": "0.19.0-M2", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "0.21.34", "latest_non_vulnerable_version": "1.0-2-1e49ccf", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41494?format=api", "vulnerability_id": "VCID-1ykn-yyp7-wbgg", "summary": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')\nhttp4s is an open source scala interface for HTTP. Header values (`Header.value`), Status reason phrases (`Status.reason`), URI paths (`Uri.Path`), URI authority registered names (`URI.RegName`).", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41084", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00451", "scoring_system": "epss", "scoring_elements": "0.64028", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00451", "scoring_system": "epss", "scoring_elements": "0.6407", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41084" }, { "reference_url": "https://github.com/http4s/http4s", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/http4s/http4s" }, { "reference_url": "https://github.com/http4s/http4s/commit/d02007db1da4f8f3df2dbf11f1db9ac7afc3f9d8", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/http4s/http4s/commit/d02007db1da4f8f3df2dbf11f1db9ac7afc3f9d8" }, { "reference_url": "https://httpwg.org/http-core/draft-ietf-httpbis-semantics-latest.html#fields.values", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://httpwg.org/http-core/draft-ietf-httpbis-semantics-latest.html#fields.values" }, { "reference_url": "https://owasp.org/www-community/attacks/HTTP_Response_Splitting", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://owasp.org/www-community/attacks/HTTP_Response_Splitting" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41084", "reference_id": "CVE-2021-41084", "reference_type": "", "scores": [ { "value": "8.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41084" }, { "reference_url": "https://github.com/advisories/GHSA-5vcm-3xc3-w7x3", "reference_id": "GHSA-5vcm-3xc3-w7x3", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-5vcm-3xc3-w7x3" }, { "reference_url": "https://github.com/http4s/http4s/security/advisories/GHSA-5vcm-3xc3-w7x3", "reference_id": "GHSA-5vcm-3xc3-w7x3", "reference_type": "", "scores": [ { "value": "8.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/http4s/http4s/security/advisories/GHSA-5vcm-3xc3-w7x3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/59058?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@0.21.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ecme-hxe7-q7d8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@0.21.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/59059?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@0.22.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ecme-hxe7-q7d8" }, { "vulnerability": "VCID-zpsp-jh45-7ygv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@0.22.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/59060?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@0.23.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ecme-hxe7-q7d8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@0.23.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/58871?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@1.0-2-1e49ccf", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@1.0-2-1e49ccf" } ], "aliases": [ "CVE-2021-41084", "GHSA-5vcm-3xc3-w7x3" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1ykn-yyp7-wbgg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41404?format=api", "vulnerability_id": "VCID-83r2-kxmr-zucc", "summary": "Origin Validation Error\nThe original `CORS` implementation and `CORSConfig` are deprecated.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-39185", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00169", "scoring_system": "epss", "scoring_elements": "0.37911", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00169", "scoring_system": "epss", "scoring_elements": "0.3782", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-39185" }, { "reference_url": "https://github.com/http4s/http4s", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/http4s/http4s" }, { "reference_url": "https://github.com/http4s/http4s/releases/tag/v0.23.2", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/http4s/http4s/releases/tag/v0.23.2" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39185", "reference_id": "CVE-2021-39185", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39185" }, { "reference_url": "https://github.com/advisories/GHSA-52cf-226f-rhr6", "reference_id": "GHSA-52cf-226f-rhr6", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-52cf-226f-rhr6" }, { "reference_url": "https://github.com/http4s/http4s/security/advisories/GHSA-52cf-226f-rhr6", "reference_id": "GHSA-52cf-226f-rhr6", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/http4s/http4s/security/advisories/GHSA-52cf-226f-rhr6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58868?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@0.21.27", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ykn-yyp7-wbgg" }, { "vulnerability": "VCID-ecme-hxe7-q7d8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@0.21.27" }, { "url": "http://public2.vulnerablecode.io/api/packages/58869?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@0.22-53-01128f5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ykn-yyp7-wbgg" }, { "vulnerability": "VCID-83r2-kxmr-zucc" }, { "vulnerability": "VCID-ecme-hxe7-q7d8" }, { "vulnerability": "VCID-zpsp-jh45-7ygv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@0.22-53-01128f5" }, { "url": "http://public2.vulnerablecode.io/api/packages/525115?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@0.22.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ykn-yyp7-wbgg" }, { "vulnerability": "VCID-ecme-hxe7-q7d8" }, { "vulnerability": "VCID-zpsp-jh45-7ygv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@0.22.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/58870?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@0.23.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ykn-yyp7-wbgg" }, { "vulnerability": "VCID-ecme-hxe7-q7d8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@0.23.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/58871?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@1.0-2-1e49ccf", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@1.0-2-1e49ccf" } ], "aliases": [ "CVE-2021-39185", "GHSA-52cf-226f-rhr6" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-83r2-kxmr-zucc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/106017?format=api", "vulnerability_id": "VCID-ecme-hxe7-q7d8", "summary": "Http4s improperly parses User-Agent and Server headers\n### Impact\n\nThe `User-Agent` and `Server` header parsers are susceptible to a fatal error on certain inputs. In http4s, modeled headers are lazily parsed, so this only applies to services that explicitly request these typed headers. \n\n#### v0.21.x\n\n```scala\nval unsafe: Option[`User-Agent`] = req.headers.get(`User-Agent`)\n```\n\n#### v0.22.x, v0.23.x, v1.x\n\n```scala\nval unsafe: Option[`User-Agent`] = req.headers.get[`User-Agent`]\nval alsoUnsafe: Option[`Server`] = req.headers.get[Server]\n```\n\n### Patches\n\nFixes are released in 0.21.34, 0.22.15, 0.23.17, and 1.0.0-M38.\n\n### Workarounds\n\n#### Use the weakly typed header interface\n\n##### v0.21.x\n\n```scala\nval safe: Option[Header] = req.headers.get(\"User-Agent\".ci)\n// but don't do this\nval unsafe = header.map(_.parsed) \n```\n\n##### v0.22.x, v0.23.x, v1.x\n\n```scala\nval safe: Option[Header] = req.headers.get(ci\"User-Agent\")\n```", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-22465", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00335", "scoring_system": "epss", "scoring_elements": "0.5657", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00335", "scoring_system": "epss", "scoring_elements": "0.56623", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-22465" }, { "reference_url": "https://github.com/http4s/http4s", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/http4s/http4s" }, { "reference_url": "https://github.com/http4s/http4s/security/advisories/GHSA-54w6-vxfh-fw7f", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:02:19Z/" } ], "url": "https://github.com/http4s/http4s/security/advisories/GHSA-54w6-vxfh-fw7f" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22465", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22465" }, { "reference_url": "https://github.com/advisories/GHSA-54w6-vxfh-fw7f", "reference_id": "GHSA-54w6-vxfh-fw7f", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-54w6-vxfh-fw7f" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/135737?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@0.21.34", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@0.21.34" }, { "url": "http://public2.vulnerablecode.io/api/packages/135738?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@0.22.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-zpsp-jh45-7ygv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@0.22.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/135739?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@0.23.17", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@0.23.17" } ], "aliases": [ "CVE-2023-22465", "GHSA-54w6-vxfh-fw7f" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ecme-hxe7-q7d8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54019?format=api", "vulnerability_id": "VCID-n9x9-k998-77cm", "summary": "Uncontrolled Resource Consumption\nBlaze, accepts connections unconditionally on a dedicated thread pool. This has the net effect of amplifying degradation in services that are unable to handle their current request load, since incoming connections are still accepted and added to an unbounded queue.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21293", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00408", "scoring_system": "epss", "scoring_elements": "0.61551", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00408", "scoring_system": "epss", "scoring_elements": "0.61503", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21293" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21294", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00408", "scoring_system": "epss", "scoring_elements": "0.61551", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00408", "scoring_system": "epss", "scoring_elements": "0.61503", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21294" }, { "reference_url": "https://github.com/http4s/blaze/commit/4f786177f9fb71ab272f3a5f6c80bca3e5662aa1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/http4s/blaze/commit/4f786177f9fb71ab272f3a5f6c80bca3e5662aa1" }, { "reference_url": "https://github.com/http4s/http4s/commit/987d6589ef79545b9bb2324ac4bdebf82d9a0171", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/http4s/http4s/commit/987d6589ef79545b9bb2324ac4bdebf82d9a0171" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21293", "reference_id": "CVE-2021-21293", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21293" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21294", "reference_id": "CVE-2021-21294", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21294" }, { "reference_url": "https://github.com/advisories/GHSA-xhv5-w9c5-2r2w", "reference_id": "GHSA-xhv5-w9c5-2r2w", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-xhv5-w9c5-2r2w" }, { "reference_url": "https://github.com/http4s/http4s/security/advisories/GHSA-xhv5-w9c5-2r2w", "reference_id": "GHSA-xhv5-w9c5-2r2w", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/http4s/http4s/security/advisories/GHSA-xhv5-w9c5-2r2w" }, { "reference_url": "https://github.com/advisories/GHSA-xmw9-q7x9-j5qc", "reference_id": "GHSA-xmw9-q7x9-j5qc", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-xmw9-q7x9-j5qc" }, { "reference_url": "https://github.com/http4s/blaze/security/advisories/GHSA-xmw9-q7x9-j5qc", "reference_id": "GHSA-xmw9-q7x9-j5qc", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/http4s/blaze/security/advisories/GHSA-xmw9-q7x9-j5qc" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/79672?format=api", "purl": "pkg:maven/org.http4s/http4s-core_2.12@0.21.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ykn-yyp7-wbgg" }, { "vulnerability": "VCID-83r2-kxmr-zucc" }, { "vulnerability": "VCID-ecme-hxe7-q7d8" }, { "vulnerability": "VCID-zpsp-jh45-7ygv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@0.21.17" } ], "aliases": [ "CVE-2021-21293", "CVE-2021-21294", "GHSA-xhv5-w9c5-2r2w", "GHSA-xmw9-q7x9-j5qc" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n9x9-k998-77cm" } ], "fixing_vulnerabilities": [], "risk_score": "4.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.http4s/http4s-core_2.12@0.19.0-M2" }