Lookup for vulnerable packages by Package URL.

GET /api/packages/360985?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/360985?format=api",
    "purl": "pkg:rpm/redhat/netty@3.6.9-1.Final_redhat_1.1.ep6?arch=el5",
    "type": "rpm",
    "namespace": "redhat",
    "name": "netty",
    "version": "3.6.9-1.Final_redhat_1.1.ep6",
    "qualifiers": {
        "arch": "el5"
    },
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": null,
    "latest_non_vulnerable_version": null,
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/30530?format=api",
            "vulnerability_id": "VCID-2nv5-xf57-3ffu",
            "summary": "",
            "references": [
                {
                    "reference_url": "http://netty.io/news/2014/04/30/release-day.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://netty.io/news/2014/04/30/release-day.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1019.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2014-1019.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1020.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2014-1020.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1021.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2014-1021.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1351.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2014-1351.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html"
                },
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0193.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0193.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0193",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.04075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88804",
                            "published_at": "2026-06-11T12:55:00Z"
                        },
                        {
                            "value": "0.04075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88843",
                            "published_at": "2026-06-12T12:55:00Z"
                        },
                        {
                            "value": "0.04075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88849",
                            "published_at": "2026-06-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0193"
                },
                {
                    "reference_url": "https://github.com/netty/netty",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/netty/netty"
                },
                {
                    "reference_url": "https://github.com/netty/netty/commit/8599ab5bdb761bb99d41a975d689f74c12e4892b",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/netty/netty/commit/8599ab5bdb761bb99d41a975d689f74c12e4892b"
                },
                {
                    "reference_url": "https://github.com/netty/netty/issues/2441",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/netty/netty/issues/2441"
                },
                {
                    "reference_url": "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E"
                },
                {
                    "reference_url": "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E"
                },
                {
                    "reference_url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193"
                },
                {
                    "reference_url": "https://web.archive.org/web/20140509033427/http://www.securityfocus.com/bid/67182",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://web.archive.org/web/20140509033427/http://www.securityfocus.com/bid/67182"
                },
                {
                    "reference_url": "https://web.archive.org/web/20140509044857/http://secunia.com/advisories/58280",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://web.archive.org/web/20140509044857/http://secunia.com/advisories/58280"
                },
                {
                    "reference_url": "https://web.archive.org/web/20161119201425/http://secunia.com/advisories/59290",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://web.archive.org/web/20161119201425/http://secunia.com/advisories/59290"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783",
                    "reference_id": "1092783",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-7vpq-g998-qpv7",
                    "reference_id": "GHSA-7vpq-g998-qpv7",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "cvssv3.1_qr",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/advisories/GHSA-7vpq-g998-qpv7"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:0818",
                    "reference_id": "RHSA-2014:0818",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:0818"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:0910",
                    "reference_id": "RHSA-2014:0910",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:0910"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1019",
                    "reference_id": "RHSA-2014:1019",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1019"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1020",
                    "reference_id": "RHSA-2014:1020",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1020"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1021",
                    "reference_id": "RHSA-2014:1021",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1021"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1351",
                    "reference_id": "RHSA-2014:1351",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1351"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0234",
                    "reference_id": "RHSA-2015:0234",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0234"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0235",
                    "reference_id": "RHSA-2015:0235",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0235"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0675",
                    "reference_id": "RHSA-2015:0675",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0675"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0720",
                    "reference_id": "RHSA-2015:0720",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0720"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0765",
                    "reference_id": "RHSA-2015:0765",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0765"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:1009",
                    "reference_id": "RHSA-2015:1009",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:1009"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2014-0193",
                "GHSA-7vpq-g998-qpv7"
            ],
            "risk_score": 3.1,
            "exploitability": "0.5",
            "weighted_severity": "6.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2nv5-xf57-3ffu"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/272446?format=api",
            "vulnerability_id": "VCID-614z-71w1-wqb6",
            "summary": "",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3464.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3464.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3464",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0019",
                            "scoring_system": "epss",
                            "scoring_elements": "0.40742",
                            "published_at": "2026-06-11T12:55:00Z"
                        },
                        {
                            "value": "0.0019",
                            "scoring_system": "epss",
                            "scoring_elements": "0.4091",
                            "published_at": "2026-06-12T12:55:00Z"
                        },
                        {
                            "value": "0.0019",
                            "scoring_system": "epss",
                            "scoring_elements": "0.40933",
                            "published_at": "2026-06-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3464"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102317",
                    "reference_id": "1102317",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102317"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1019",
                    "reference_id": "RHSA-2014:1019",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1019"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1020",
                    "reference_id": "RHSA-2014:1020",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1020"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1021",
                    "reference_id": "RHSA-2014:1021",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1021"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2014-3464"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-614z-71w1-wqb6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/109483?format=api",
            "vulnerability_id": "VCID-9nuk-vm33-kkha",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0231.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0231.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0231",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.44151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97629",
                            "published_at": "2026-06-11T12:55:00Z"
                        },
                        {
                            "value": "0.44151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97638",
                            "published_at": "2026-06-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0231"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120596",
                    "reference_id": "1120596",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120596"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2014-0231.json",
                    "reference_id": "CVE-2014-0231",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "important",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2014-0231.json"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201504-03",
                    "reference_id": "GLSA-201504-03",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201504-03"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:0920",
                    "reference_id": "RHSA-2014:0920",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:0920"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:0921",
                    "reference_id": "RHSA-2014:0921",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:0921"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:0922",
                    "reference_id": "RHSA-2014:0922",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:0922"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1019",
                    "reference_id": "RHSA-2014:1019",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1019"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1020",
                    "reference_id": "RHSA-2014:1020",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1020"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1021",
                    "reference_id": "RHSA-2014:1021",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1021"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1086",
                    "reference_id": "RHSA-2014:1086",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1086"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1087",
                    "reference_id": "RHSA-2014:1087",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1087"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1088",
                    "reference_id": "RHSA-2014:1088",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1088"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/2299-1/",
                    "reference_id": "USN-2299-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/2299-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2014-0231"
            ],
            "risk_score": 3.1,
            "exploitability": "0.5",
            "weighted_severity": "6.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9nuk-vm33-kkha"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/272447?format=api",
            "vulnerability_id": "VCID-cdfr-mqyr-7fdv",
            "summary": "",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3472.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3472.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3472",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00241",
                            "scoring_system": "epss",
                            "scoring_elements": "0.4759",
                            "published_at": "2026-06-11T12:55:00Z"
                        },
                        {
                            "value": "0.00241",
                            "scoring_system": "epss",
                            "scoring_elements": "0.4773",
                            "published_at": "2026-06-12T12:55:00Z"
                        },
                        {
                            "value": "0.00241",
                            "scoring_system": "epss",
                            "scoring_elements": "0.47746",
                            "published_at": "2026-06-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3472"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815",
                    "reference_id": "1103815",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1019",
                    "reference_id": "RHSA-2014:1019",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1019"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1020",
                    "reference_id": "RHSA-2014:1020",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1020"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1021",
                    "reference_id": "RHSA-2014:1021",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1021"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0234",
                    "reference_id": "RHSA-2015:0234",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0234"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0235",
                    "reference_id": "RHSA-2015:0235",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0235"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0720",
                    "reference_id": "RHSA-2015:0720",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0720"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:1009",
                    "reference_id": "RHSA-2015:1009",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:1009"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2014-3472"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cdfr-mqyr-7fdv"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/30301?format=api",
            "vulnerability_id": "VCID-cpun-p57h-2fc7",
            "summary": "",
            "references": [
                {
                    "reference_url": "http://advisories.mageia.org/MGASA-2015-0081.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://advisories.mageia.org/MGASA-2015-0081.html"
                },
                {
                    "reference_url": "http://archives.neohapsis.com/archives/bugtraq/2015-02/0067.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://archives.neohapsis.com/archives/bugtraq/2015-02/0067.html"
                },
                {
                    "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html"
                },
                {
                    "reference_url": "http://marc.info/?l=bugtraq&m=143393515412274&w=2",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://marc.info/?l=bugtraq&m=143393515412274&w=2"
                },
                {
                    "reference_url": "http://marc.info/?l=bugtraq&m=143403519711434&w=2",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://marc.info/?l=bugtraq&m=143403519711434&w=2"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0983.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2015-0983.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0991.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2015-0991.html"
                },
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0227.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0227.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0227",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.69385",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98675",
                            "published_at": "2026-06-12T12:55:00Z"
                        },
                        {
                            "value": "0.69385",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98676",
                            "published_at": "2026-06-13T12:55:00Z"
                        },
                        {
                            "value": "0.69385",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9867",
                            "published_at": "2026-06-11T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0227"
                },
                {
                    "reference_url": "https://github.com/apache/tomcat",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/apache/tomcat"
                },
                {
                    "reference_url": "https://github.com/apache/tomcat70/commit/6b23790bf7dc4233affaacec57e06cff6b6c6fd3",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/apache/tomcat70/commit/6b23790bf7dc4233affaacec57e06cff6b6c6fd3"
                },
                {
                    "reference_url": "https://github.com/apache/tomcat/commit/593a2447e6ebe465585cfa07e93b5635dffa1c70",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/apache/tomcat/commit/593a2447e6ebe465585cfa07e93b5635dffa1c70"
                },
                {
                    "reference_url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E"
                },
                {
                    "reference_url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E"
                },
                {
                    "reference_url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E"
                },
                {
                    "reference_url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E"
                },
                {
                    "reference_url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E"
                },
                {
                    "reference_url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E"
                },
                {
                    "reference_url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
                },
                {
                    "reference_url": "https://source.jboss.org/changelog/JBossWeb?cs=2455",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://source.jboss.org/changelog/JBossWeb?cs=2455"
                },
                {
                    "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1600984",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://svn.apache.org/viewvc?view=rev&rev=1600984"
                },
                {
                    "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1601329",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://svn.apache.org/viewvc?view=rev&rev=1601329"
                },
                {
                    "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1601330",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://svn.apache.org/viewvc?view=rev&rev=1601330"
                },
                {
                    "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1601332",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://svn.apache.org/viewvc?view=rev&rev=1601332"
                },
                {
                    "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1601333",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://svn.apache.org/viewvc?view=rev&rev=1601333"
                },
                {
                    "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1603628",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://svn.apache.org/viewvc?view=rev&rev=1603628"
                },
                {
                    "reference_url": "http://svn.apache.org/viewvc?view=revision&revision=1600984",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://svn.apache.org/viewvc?view=revision&revision=1600984"
                },
                {
                    "reference_url": "http://www.debian.org/security/2016/dsa-3447",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.debian.org/security/2016/dsa-3447"
                },
                {
                    "reference_url": "http://www.debian.org/security/2016/dsa-3530",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.debian.org/security/2016/dsa-3530"
                },
                {
                    "reference_url": "http://www.ubuntu.com/usn/USN-2654-1",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.ubuntu.com/usn/USN-2654-1"
                },
                {
                    "reference_url": "http://www.ubuntu.com/usn/USN-2655-1",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.ubuntu.com/usn/USN-2655-1"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196",
                    "reference_id": "1109196",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0227",
                    "reference_id": "CVE-2014-0227",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Important",
                            "scoring_system": "apache_tomcat",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0227"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-42j3-498q-m6vp",
                    "reference_id": "GHSA-42j3-498q-m6vp",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "cvssv3.1_qr",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/advisories/GHSA-42j3-498q-m6vp"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1019",
                    "reference_id": "RHSA-2014:1019",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1019"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1020",
                    "reference_id": "RHSA-2014:1020",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1020"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1021",
                    "reference_id": "RHSA-2014:1021",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1021"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1086",
                    "reference_id": "RHSA-2014:1086",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1086"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1087",
                    "reference_id": "RHSA-2014:1087",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1087"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1088",
                    "reference_id": "RHSA-2014:1088",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1088"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1904",
                    "reference_id": "RHSA-2014:1904",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1904"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0091",
                    "reference_id": "RHSA-2015:0091",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0091"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0234",
                    "reference_id": "RHSA-2015:0234",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0234"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0235",
                    "reference_id": "RHSA-2015:0235",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0235"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0675",
                    "reference_id": "RHSA-2015:0675",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0675"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0720",
                    "reference_id": "RHSA-2015:0720",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0720"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0765",
                    "reference_id": "RHSA-2015:0765",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0765"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0983",
                    "reference_id": "RHSA-2015:0983",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0983"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0991",
                    "reference_id": "RHSA-2015:0991",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0991"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:1009",
                    "reference_id": "RHSA-2015:1009",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:1009"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/2654-1/",
                    "reference_id": "USN-2654-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/2654-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/2655-1/",
                    "reference_id": "USN-2655-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/2655-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2014-0227",
                "GHSA-42j3-498q-m6vp"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cpun-p57h-2fc7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/109481?format=api",
            "vulnerability_id": "VCID-dj7a-88wd-dugh",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0226.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0226.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0226",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.75444",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98911",
                            "published_at": "2026-06-11T12:55:00Z"
                        },
                        {
                            "value": "0.75444",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98915",
                            "published_at": "2026-06-12T12:55:00Z"
                        },
                        {
                            "value": "0.75444",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98917",
                            "published_at": "2026-06-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0226"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603",
                    "reference_id": "1120603",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2014-0226.json",
                    "reference_id": "CVE-2014-0226",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "moderate",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2014-0226.json"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/34133.txt",
                    "reference_id": "CVE-2014-0226;OSVDB-109216",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/34133.txt"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201408-12",
                    "reference_id": "GLSA-201408-12",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201408-12"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201504-03",
                    "reference_id": "GLSA-201504-03",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201504-03"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:0920",
                    "reference_id": "RHSA-2014:0920",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:0920"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:0921",
                    "reference_id": "RHSA-2014:0921",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:0921"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:0922",
                    "reference_id": "RHSA-2014:0922",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:0922"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1019",
                    "reference_id": "RHSA-2014:1019",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1019"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1020",
                    "reference_id": "RHSA-2014:1020",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1020"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1021",
                    "reference_id": "RHSA-2014:1021",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1021"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1086",
                    "reference_id": "RHSA-2014:1086",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1086"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1087",
                    "reference_id": "RHSA-2014:1087",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1087"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1088",
                    "reference_id": "RHSA-2014:1088",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1088"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/2299-1/",
                    "reference_id": "USN-2299-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/2299-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2014-0226"
            ],
            "risk_score": 9.6,
            "exploitability": "2.0",
            "weighted_severity": "4.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dj7a-88wd-dugh"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/109479?format=api",
            "vulnerability_id": "VCID-xmt2-8ett-qbgx",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0118.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0118.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0118",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.41327",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97492",
                            "published_at": "2026-06-11T12:55:00Z"
                        },
                        {
                            "value": "0.41327",
                            "scoring_system": "epss",
                            "scoring_elements": "0.975",
                            "published_at": "2026-06-12T12:55:00Z"
                        },
                        {
                            "value": "0.41327",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97502",
                            "published_at": "2026-06-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0118"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120601",
                    "reference_id": "1120601",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120601"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2014-0118.json",
                    "reference_id": "CVE-2014-0118",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "moderate",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2014-0118.json"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201504-03",
                    "reference_id": "GLSA-201504-03",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201504-03"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:0920",
                    "reference_id": "RHSA-2014:0920",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:0920"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:0921",
                    "reference_id": "RHSA-2014:0921",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:0921"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:0922",
                    "reference_id": "RHSA-2014:0922",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:0922"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1019",
                    "reference_id": "RHSA-2014:1019",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1019"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1020",
                    "reference_id": "RHSA-2014:1020",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1020"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1021",
                    "reference_id": "RHSA-2014:1021",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1021"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1086",
                    "reference_id": "RHSA-2014:1086",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1086"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1087",
                    "reference_id": "RHSA-2014:1087",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1087"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1088",
                    "reference_id": "RHSA-2014:1088",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1088"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/2299-1/",
                    "reference_id": "USN-2299-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/2299-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2014-0118"
            ],
            "risk_score": 2.4,
            "exploitability": "0.5",
            "weighted_severity": "4.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xmt2-8ett-qbgx"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": "9.6",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/netty@3.6.9-1.Final_redhat_1.1.ep6%3Farch=el5"
}