Lookup for vulnerable packages by Package URL.

GET /api/packages/439604?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/439604?format=api",
    "purl": "pkg:apk/alpine/openjdk11@11.0.20_p8-r0?arch=x86_64&distroversion=v3.23&reponame=community",
    "type": "apk",
    "namespace": "alpine",
    "name": "openjdk11",
    "version": "11.0.20_p8-r0",
    "qualifiers": {
        "arch": "x86_64",
        "distroversion": "v3.23",
        "reponame": "community"
    },
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "11.0.21_p9-r0",
    "latest_non_vulnerable_version": "11.0.30_p7-r0",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31962?format=api",
            "vulnerability_id": "VCID-a59u-h67v-yygm",
            "summary": "Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-22041.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.1",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-22041.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-22041",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00073",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22241",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00073",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22289",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00073",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22073",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00073",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22154",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00073",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22208",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00073",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22229",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00073",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22188",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00073",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22128",
                            "published_at": "2026-04-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-22041"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22006",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22006"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22036",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22036"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22041",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22041"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22045",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22045"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22049",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22049"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.1",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2223207",
                    "reference_id": "2223207",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2223207"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202407-24",
                    "reference_id": "GLSA-202407-24",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202407-24"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202412-07",
                    "reference_id": "GLSA-202412-07",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202412-07"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4157",
                    "reference_id": "RHSA-2023:4157",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4157"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4158",
                    "reference_id": "RHSA-2023:4158",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4158"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4159",
                    "reference_id": "RHSA-2023:4159",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4159"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4161",
                    "reference_id": "RHSA-2023:4161",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4161"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4162",
                    "reference_id": "RHSA-2023:4162",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4162"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4163",
                    "reference_id": "RHSA-2023:4163",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4163"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4164",
                    "reference_id": "RHSA-2023:4164",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4164"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4165",
                    "reference_id": "RHSA-2023:4165",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4165"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4169",
                    "reference_id": "RHSA-2023:4169",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4169"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4170",
                    "reference_id": "RHSA-2023:4170",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4170"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4171",
                    "reference_id": "RHSA-2023:4171",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4171"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4175",
                    "reference_id": "RHSA-2023:4175",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4175"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4177",
                    "reference_id": "RHSA-2023:4177",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4177"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4208",
                    "reference_id": "RHSA-2023:4208",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4208"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4210",
                    "reference_id": "RHSA-2023:4210",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4210"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4211",
                    "reference_id": "RHSA-2023:4211",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4211"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4233",
                    "reference_id": "RHSA-2023:4233",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4233"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6263-1/",
                    "reference_id": "USN-6263-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6263-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6272-1/",
                    "reference_id": "USN-6272-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6272-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/439604?format=api",
                    "purl": "pkg:apk/alpine/openjdk11@11.0.20_p8-r0?arch=x86_64&distroversion=v3.23&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.20_p8-r0%3Farch=x86_64&distroversion=v3.23&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2023-22041"
            ],
            "risk_score": 2.3,
            "exploitability": "0.5",
            "weighted_severity": "4.6",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-a59u-h67v-yygm"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31965?format=api",
            "vulnerability_id": "VCID-dyg2-udwy-cud7",
            "summary": "Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-22045.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.7",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-22045.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-22045",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3604",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36098",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36104",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36066",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3603",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3608",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00201",
                            "scoring_system": "epss",
                            "scoring_elements": "0.42145",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00201",
                            "scoring_system": "epss",
                            "scoring_elements": "0.42172",
                            "published_at": "2026-04-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-22045"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22006",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22006"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22036",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22036"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22041",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22041"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22045",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22045"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22049",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22049"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.7",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221645",
                    "reference_id": "2221645",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221645"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202407-24",
                    "reference_id": "GLSA-202407-24",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202407-24"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202412-07",
                    "reference_id": "GLSA-202412-07",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202412-07"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4157",
                    "reference_id": "RHSA-2023:4157",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4157"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4158",
                    "reference_id": "RHSA-2023:4158",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4158"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4159",
                    "reference_id": "RHSA-2023:4159",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4159"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4161",
                    "reference_id": "RHSA-2023:4161",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4161"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4162",
                    "reference_id": "RHSA-2023:4162",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4162"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4163",
                    "reference_id": "RHSA-2023:4163",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4163"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4164",
                    "reference_id": "RHSA-2023:4164",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4164"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4165",
                    "reference_id": "RHSA-2023:4165",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4165"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4166",
                    "reference_id": "RHSA-2023:4166",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4166"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4167",
                    "reference_id": "RHSA-2023:4167",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4167"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4168",
                    "reference_id": "RHSA-2023:4168",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4168"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4169",
                    "reference_id": "RHSA-2023:4169",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4169"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4170",
                    "reference_id": "RHSA-2023:4170",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4170"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4171",
                    "reference_id": "RHSA-2023:4171",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4171"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4172",
                    "reference_id": "RHSA-2023:4172",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4172"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4173",
                    "reference_id": "RHSA-2023:4173",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4173"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4174",
                    "reference_id": "RHSA-2023:4174",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4174"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4175",
                    "reference_id": "RHSA-2023:4175",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4175"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4176",
                    "reference_id": "RHSA-2023:4176",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4176"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4177",
                    "reference_id": "RHSA-2023:4177",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4177"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4178",
                    "reference_id": "RHSA-2023:4178",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4178"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4208",
                    "reference_id": "RHSA-2023:4208",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4208"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4209",
                    "reference_id": "RHSA-2023:4209",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4209"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4210",
                    "reference_id": "RHSA-2023:4210",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4210"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4211",
                    "reference_id": "RHSA-2023:4211",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4211"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4212",
                    "reference_id": "RHSA-2023:4212",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4212"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4233",
                    "reference_id": "RHSA-2023:4233",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4233"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6263-1/",
                    "reference_id": "USN-6263-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6263-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6272-1/",
                    "reference_id": "USN-6272-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6272-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/439604?format=api",
                    "purl": "pkg:apk/alpine/openjdk11@11.0.20_p8-r0?arch=x86_64&distroversion=v3.23&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.20_p8-r0%3Farch=x86_64&distroversion=v3.23&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2023-22045"
            ],
            "risk_score": 1.6,
            "exploitability": "0.5",
            "weighted_severity": "3.3",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dyg2-udwy-cud7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31966?format=api",
            "vulnerability_id": "VCID-gjgy-dfq7-zfb2",
            "summary": "Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-22049.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.7",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-22049.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-22049",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00065",
                            "scoring_system": "epss",
                            "scoring_elements": "0.20289",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00065",
                            "scoring_system": "epss",
                            "scoring_elements": "0.20363",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00065",
                            "scoring_system": "epss",
                            "scoring_elements": "0.20392",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00065",
                            "scoring_system": "epss",
                            "scoring_elements": "0.20347",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00065",
                            "scoring_system": "epss",
                            "scoring_elements": "0.20223",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00065",
                            "scoring_system": "epss",
                            "scoring_elements": "0.20303",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00086",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24864",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00086",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24903",
                            "published_at": "2026-04-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-22049"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22006",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22006"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22036",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22036"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22041",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22041"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22045",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22045"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22049",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22049"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.7",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221647",
                    "reference_id": "2221647",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221647"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202407-24",
                    "reference_id": "GLSA-202407-24",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202407-24"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202412-07",
                    "reference_id": "GLSA-202412-07",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202412-07"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4157",
                    "reference_id": "RHSA-2023:4157",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4157"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4158",
                    "reference_id": "RHSA-2023:4158",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4158"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4159",
                    "reference_id": "RHSA-2023:4159",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4159"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4161",
                    "reference_id": "RHSA-2023:4161",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4161"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4162",
                    "reference_id": "RHSA-2023:4162",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4162"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4163",
                    "reference_id": "RHSA-2023:4163",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4163"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4164",
                    "reference_id": "RHSA-2023:4164",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4164"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4165",
                    "reference_id": "RHSA-2023:4165",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4165"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4166",
                    "reference_id": "RHSA-2023:4166",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4166"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4167",
                    "reference_id": "RHSA-2023:4167",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4167"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4168",
                    "reference_id": "RHSA-2023:4168",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4168"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4169",
                    "reference_id": "RHSA-2023:4169",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4169"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4170",
                    "reference_id": "RHSA-2023:4170",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4170"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4171",
                    "reference_id": "RHSA-2023:4171",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4171"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4172",
                    "reference_id": "RHSA-2023:4172",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4172"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4173",
                    "reference_id": "RHSA-2023:4173",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4173"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4174",
                    "reference_id": "RHSA-2023:4174",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4174"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4175",
                    "reference_id": "RHSA-2023:4175",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4175"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4176",
                    "reference_id": "RHSA-2023:4176",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4176"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4177",
                    "reference_id": "RHSA-2023:4177",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4177"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4178",
                    "reference_id": "RHSA-2023:4178",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4178"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4208",
                    "reference_id": "RHSA-2023:4208",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4208"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4209",
                    "reference_id": "RHSA-2023:4209",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4209"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4210",
                    "reference_id": "RHSA-2023:4210",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4210"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4211",
                    "reference_id": "RHSA-2023:4211",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4211"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4212",
                    "reference_id": "RHSA-2023:4212",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4212"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4233",
                    "reference_id": "RHSA-2023:4233",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4233"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4876",
                    "reference_id": "RHSA-2023:4876",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4876"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4877",
                    "reference_id": "RHSA-2023:4877",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4877"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6263-1/",
                    "reference_id": "USN-6263-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6263-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6272-1/",
                    "reference_id": "USN-6272-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6272-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/439604?format=api",
                    "purl": "pkg:apk/alpine/openjdk11@11.0.20_p8-r0?arch=x86_64&distroversion=v3.23&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.20_p8-r0%3Farch=x86_64&distroversion=v3.23&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2023-22049"
            ],
            "risk_score": 1.6,
            "exploitability": "0.5",
            "weighted_severity": "3.3",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gjgy-dfq7-zfb2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31960?format=api",
            "vulnerability_id": "VCID-jw6x-cntu-nfht",
            "summary": "Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-22036.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.7",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-22036.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-22036",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00097",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26986",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00097",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27022",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00097",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26812",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00097",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26881",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00097",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26928",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00097",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26932",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00097",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26888",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00097",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26831",
                            "published_at": "2026-04-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-22036"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22006",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22006"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22036",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22036"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22041",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22041"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22045",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22045"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22049",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22049"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.7",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221634",
                    "reference_id": "2221634",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221634"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202407-24",
                    "reference_id": "GLSA-202407-24",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202407-24"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202412-07",
                    "reference_id": "GLSA-202412-07",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202412-07"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4157",
                    "reference_id": "RHSA-2023:4157",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4157"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4158",
                    "reference_id": "RHSA-2023:4158",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4158"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4159",
                    "reference_id": "RHSA-2023:4159",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4159"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4161",
                    "reference_id": "RHSA-2023:4161",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4161"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4162",
                    "reference_id": "RHSA-2023:4162",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4162"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4163",
                    "reference_id": "RHSA-2023:4163",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4163"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4164",
                    "reference_id": "RHSA-2023:4164",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4164"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4165",
                    "reference_id": "RHSA-2023:4165",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4165"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4169",
                    "reference_id": "RHSA-2023:4169",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4169"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4170",
                    "reference_id": "RHSA-2023:4170",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4170"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4171",
                    "reference_id": "RHSA-2023:4171",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4171"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4175",
                    "reference_id": "RHSA-2023:4175",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4175"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4177",
                    "reference_id": "RHSA-2023:4177",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4177"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4208",
                    "reference_id": "RHSA-2023:4208",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4208"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4210",
                    "reference_id": "RHSA-2023:4210",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4210"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4211",
                    "reference_id": "RHSA-2023:4211",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4211"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4233",
                    "reference_id": "RHSA-2023:4233",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4233"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6263-1/",
                    "reference_id": "USN-6263-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6263-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6272-1/",
                    "reference_id": "USN-6272-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6272-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/439604?format=api",
                    "purl": "pkg:apk/alpine/openjdk11@11.0.20_p8-r0?arch=x86_64&distroversion=v3.23&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.20_p8-r0%3Farch=x86_64&distroversion=v3.23&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2023-22036"
            ],
            "risk_score": 1.6,
            "exploitability": "0.5",
            "weighted_severity": "3.3",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jw6x-cntu-nfht"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31957?format=api",
            "vulnerability_id": "VCID-x4ms-sbj7-aufu",
            "summary": "Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-22006.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.1",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-22006.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-22006",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00147",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35272",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00147",
                            "scoring_system": "epss",
                            "scoring_elements": "0.353",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00147",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35182",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00147",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35226",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00147",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35251",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00147",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35255",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00147",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3522",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00147",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35196",
                            "published_at": "2026-04-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-22006"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22006",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22006"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22036",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22036"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22041",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22041"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22045",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22045"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22049",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22049"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.1",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221626",
                    "reference_id": "2221626",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221626"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202407-24",
                    "reference_id": "GLSA-202407-24",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202407-24"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202412-07",
                    "reference_id": "GLSA-202412-07",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202412-07"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4157",
                    "reference_id": "RHSA-2023:4157",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4157"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4158",
                    "reference_id": "RHSA-2023:4158",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4158"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4159",
                    "reference_id": "RHSA-2023:4159",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4159"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4161",
                    "reference_id": "RHSA-2023:4161",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4161"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4162",
                    "reference_id": "RHSA-2023:4162",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4162"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4163",
                    "reference_id": "RHSA-2023:4163",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4163"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4164",
                    "reference_id": "RHSA-2023:4164",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4164"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4165",
                    "reference_id": "RHSA-2023:4165",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4165"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4169",
                    "reference_id": "RHSA-2023:4169",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4169"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4170",
                    "reference_id": "RHSA-2023:4170",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4170"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4171",
                    "reference_id": "RHSA-2023:4171",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4171"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4175",
                    "reference_id": "RHSA-2023:4175",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4175"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4177",
                    "reference_id": "RHSA-2023:4177",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4177"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4208",
                    "reference_id": "RHSA-2023:4208",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4208"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4210",
                    "reference_id": "RHSA-2023:4210",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4210"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4211",
                    "reference_id": "RHSA-2023:4211",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4211"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4233",
                    "reference_id": "RHSA-2023:4233",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4233"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6263-1/",
                    "reference_id": "USN-6263-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6263-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6272-1/",
                    "reference_id": "USN-6272-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6272-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/439604?format=api",
                    "purl": "pkg:apk/alpine/openjdk11@11.0.20_p8-r0?arch=x86_64&distroversion=v3.23&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.20_p8-r0%3Farch=x86_64&distroversion=v3.23&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2023-22006"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x4ms-sbj7-aufu"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/16353?format=api",
            "vulnerability_id": "VCID-zzcp-hvdf-zqgf",
            "summary": "Allocation of Resources Without Limits or Throttling\nhb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-25193.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-25193.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25193",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00107",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29021",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00107",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28899",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00107",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2907",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00107",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28878",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00107",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28946",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00107",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28988",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00107",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28992",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00107",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28948",
                            "published_at": "2026-04-12T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25193"
                },
                {
                    "reference_url": "https://chromium.googlesource.com/chromium/src/+/e1f324aa681af54101c1f2d173d92adb80e37088/DEPS#361",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                        },
                        {
                            "value": "Track",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-25T20:22:18Z/"
                        }
                    ],
                    "url": "https://chromium.googlesource.com/chromium/src/+/e1f324aa681af54101c1f2d173d92adb80e37088/DEPS#361"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25193",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25193"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://github.com/harfbuzz/harfbuzz/blob/2822b589bc837fae6f66233e2cf2eef0f6ce8470/src/hb-ot-layout-gsubgpos.hh",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                        },
                        {
                            "value": "Track",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-25T20:22:18Z/"
                        }
                    ],
                    "url": "https://github.com/harfbuzz/harfbuzz/blob/2822b589bc837fae6f66233e2cf2eef0f6ce8470/src/hb-ot-layout-gsubgpos.hh"
                },
                {
                    "reference_url": "https://github.com/harfbuzz/harfbuzz/commit/85be877925ddbf34f74a1229f3ca1716bb6170dc",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                        },
                        {
                            "value": "Track",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-25T20:22:18Z/"
                        }
                    ],
                    "url": "https://github.com/harfbuzz/harfbuzz/commit/85be877925ddbf34f74a1229f3ca1716bb6170dc"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KWCHWSICWVZSAXP2YAXM65JC2GR53547/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KWCHWSICWVZSAXP2YAXM65JC2GR53547/"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1030612",
                    "reference_id": "1030612",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1030612"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167254",
                    "reference_id": "2167254",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167254"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25193",
                    "reference_id": "CVE-2023-25193",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25193"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202407-24",
                    "reference_id": "GLSA-202407-24",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202407-24"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWCHWSICWVZSAXP2YAXM65JC2GR53547/",
                    "reference_id": "KWCHWSICWVZSAXP2YAXM65JC2GR53547",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                        },
                        {
                            "value": "Track",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-25T20:22:18Z/"
                        }
                    ],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWCHWSICWVZSAXP2YAXM65JC2GR53547/"
                },
                {
                    "reference_url": "https://security.netapp.com/advisory/ntap-20230725-0006/",
                    "reference_id": "ntap-20230725-0006",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                        },
                        {
                            "value": "Track",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-25T20:22:18Z/"
                        }
                    ],
                    "url": "https://security.netapp.com/advisory/ntap-20230725-0006/"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4157",
                    "reference_id": "RHSA-2023:4157",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4157"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4158",
                    "reference_id": "RHSA-2023:4158",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4158"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4159",
                    "reference_id": "RHSA-2023:4159",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4159"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4161",
                    "reference_id": "RHSA-2023:4161",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4161"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4162",
                    "reference_id": "RHSA-2023:4162",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4162"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4163",
                    "reference_id": "RHSA-2023:4163",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4163"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4164",
                    "reference_id": "RHSA-2023:4164",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4164"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4165",
                    "reference_id": "RHSA-2023:4165",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4165"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4169",
                    "reference_id": "RHSA-2023:4169",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4169"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4170",
                    "reference_id": "RHSA-2023:4170",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4170"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4171",
                    "reference_id": "RHSA-2023:4171",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4171"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4175",
                    "reference_id": "RHSA-2023:4175",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4175"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4177",
                    "reference_id": "RHSA-2023:4177",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4177"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4208",
                    "reference_id": "RHSA-2023:4208",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4208"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4210",
                    "reference_id": "RHSA-2023:4210",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4210"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4211",
                    "reference_id": "RHSA-2023:4211",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4211"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2023:4233",
                    "reference_id": "RHSA-2023:4233",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2023:4233"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2024:2410",
                    "reference_id": "RHSA-2024:2410",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2024:2410"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2024:2980",
                    "reference_id": "RHSA-2024:2980",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2024:2980"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6263-1/",
                    "reference_id": "USN-6263-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6263-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/6272-1/",
                    "reference_id": "USN-6272-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/6272-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/7251-1/",
                    "reference_id": "USN-7251-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/7251-1/"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZ5M2GSAIHFPLHYJXUPQ2QDJCLWXUGO3/",
                    "reference_id": "YZ5M2GSAIHFPLHYJXUPQ2QDJCLWXUGO3",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                        },
                        {
                            "value": "Track",
                            "scoring_system": "ssvc",
                            "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-25T20:22:18Z/"
                        }
                    ],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZ5M2GSAIHFPLHYJXUPQ2QDJCLWXUGO3/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/439604?format=api",
                    "purl": "pkg:apk/alpine/openjdk11@11.0.20_p8-r0?arch=x86_64&distroversion=v3.23&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.20_p8-r0%3Farch=x86_64&distroversion=v3.23&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2023-25193"
            ],
            "risk_score": 3.4,
            "exploitability": "0.5",
            "weighted_severity": "6.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zzcp-hvdf-zqgf"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.20_p8-r0%3Farch=x86_64&distroversion=v3.23&reponame=community"
}