Lookup for vulnerable packages by Package URL.

GET /api/packages/62774?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/62774?format=api",
    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.0",
    "type": "nuget",
    "namespace": "",
    "name": "Microsoft.NETCore.App.Runtime.win-x64",
    "version": "6.0.0",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": "6.0.3",
    "latest_non_vulnerable_version": "10.0.4",
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17786?format=api",
            "vulnerability_id": "VCID-19ue-6u5k-53gc",
            "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-24897",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01788",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83056",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-24897"
                },
                {
                    "reference_url": "https://github.com/dotnet/announcements/issues/260",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/announcements/issues/260"
                },
                {
                    "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24897",
                    "reference_id": "CVE-2023-24897",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24897"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24897",
                    "reference_id": "CVE-2023-24897",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24897"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-88q2-h5g3-p4pg",
                    "reference_id": "GHSA-88q2-h5g3-p4pg",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-88q2-h5g3-p4pg"
                },
                {
                    "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-88q2-h5g3-p4pg",
                    "reference_id": "GHSA-88q2-h5g3-p4pg",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-88q2-h5g3-p4pg"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/64290?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.18",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.18"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/64291?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.7",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.7"
                }
            ],
            "aliases": [
                "CVE-2023-24897",
                "GHSA-88q2-h5g3-p4pg"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-19ue-6u5k-53gc"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17315?format=api",
            "vulnerability_id": "VCID-43hs-h939-abgy",
            "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n.NET DLL Hijacking Remote Code Execution Vulnerability",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-28260",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01557",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81762",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-28260"
                },
                {
                    "reference_url": "https://www.cve.org/CVERecord?id=CVE-2023-28260",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://www.cve.org/CVERecord?id=CVE-2023-28260"
                },
                {
                    "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28260",
                    "reference_id": "CVE-2023-28260",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28260"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28260",
                    "reference_id": "CVE-2023-28260",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28260"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-w4m3-43gp-x8hx",
                    "reference_id": "GHSA-w4m3-43gp-x8hx",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-w4m3-43gp-x8hx"
                },
                {
                    "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-w4m3-43gp-x8hx",
                    "reference_id": "GHSA-w4m3-43gp-x8hx",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-w4m3-43gp-x8hx"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/63401?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.16",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-19ue-6u5k-53gc"
                        },
                        {
                            "vulnerability": "VCID-6jg2-cqdk-4qej"
                        },
                        {
                            "vulnerability": "VCID-fjvh-u5ag-wqdb"
                        },
                        {
                            "vulnerability": "VCID-jxkp-swjn-j3fw"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.16"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/63402?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.5",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-19ue-6u5k-53gc"
                        },
                        {
                            "vulnerability": "VCID-6jg2-cqdk-4qej"
                        },
                        {
                            "vulnerability": "VCID-etht-h2wy-c7ha"
                        },
                        {
                            "vulnerability": "VCID-fjvh-u5ag-wqdb"
                        },
                        {
                            "vulnerability": "VCID-jxkp-swjn-j3fw"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.5"
                }
            ],
            "aliases": [
                "CVE-2023-28260",
                "GHSA-w4m3-43gp-x8hx"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-43hs-h939-abgy"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17787?format=api",
            "vulnerability_id": "VCID-6jg2-cqdk-4qej",
            "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-24936",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78894",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-24936"
                },
                {
                    "reference_url": "https://github.com/dotnet/announcements/issues/259",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/announcements/issues/259"
                },
                {
                    "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936",
                    "reference_id": "CVE-2023-24936",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24936",
                    "reference_id": "CVE-2023-24936",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24936"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-jx7q-xxmw-44vf",
                    "reference_id": "GHSA-jx7q-xxmw-44vf",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-jx7q-xxmw-44vf"
                },
                {
                    "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-jx7q-xxmw-44vf",
                    "reference_id": "GHSA-jx7q-xxmw-44vf",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-jx7q-xxmw-44vf"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/64290?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.18",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.18"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/64291?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.7",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.7"
                }
            ],
            "aliases": [
                "CVE-2023-24936",
                "GHSA-jx7q-xxmw-44vf"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6jg2-cqdk-4qej"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/16873?format=api",
            "vulnerability_id": "VCID-6tq2-vne9-77gb",
            "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n.NET and Visual Studio Remote Code Execution Vulnerability",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-21808",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01277",
                            "scoring_system": "epss",
                            "scoring_elements": "0.79875",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-21808"
                },
                {
                    "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21808",
                    "reference_id": "CVE-2023-21808",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21808"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21808",
                    "reference_id": "CVE-2023-21808",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21808"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-824j-wqm8-89mj",
                    "reference_id": "GHSA-824j-wqm8-89mj",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-824j-wqm8-89mj"
                },
                {
                    "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-824j-wqm8-89mj",
                    "reference_id": "GHSA-824j-wqm8-89mj",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-824j-wqm8-89mj"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/62778?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.14",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.14"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/62779?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.3",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.3"
                }
            ],
            "aliases": [
                "CVE-2023-21808",
                "GHSA-824j-wqm8-89mj"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6tq2-vne9-77gb"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/18419?format=api",
            "vulnerability_id": "VCID-7q1a-yf8n-1kda",
            "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nVisual Studio Remote Code Execution Vulnerability",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-36792",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00974",
                            "scoring_system": "epss",
                            "scoring_elements": "0.76975",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-36792"
                },
                {
                    "reference_url": "https://github.com/dotnet/runtime/issues/91944",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/runtime/issues/91944"
                },
                {
                    "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36792",
                    "reference_id": "CVE-2023-36792",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36792"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36792",
                    "reference_id": "CVE-2023-36792",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36792"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-3qf9-qxfj-4whc",
                    "reference_id": "GHSA-3qf9-qxfj-4whc",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-3qf9-qxfj-4whc"
                },
                {
                    "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-3qf9-qxfj-4whc",
                    "reference_id": "GHSA-3qf9-qxfj-4whc",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-3qf9-qxfj-4whc"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/65677?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.22",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.22"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/65678?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.11",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.11"
                }
            ],
            "aliases": [
                "CVE-2023-36792",
                "GHSA-3qf9-qxfj-4whc"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7q1a-yf8n-1kda"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/18420?format=api",
            "vulnerability_id": "VCID-bx3w-bwph-tybw",
            "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nVisual Studio Remote Code Execution Vulnerability",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-36796",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00754",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73538",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-36796"
                },
                {
                    "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36796",
                    "reference_id": "CVE-2023-36796",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36796"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36796",
                    "reference_id": "CVE-2023-36796",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36796"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-h7jm-g87p-5935",
                    "reference_id": "GHSA-h7jm-g87p-5935",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-h7jm-g87p-5935"
                },
                {
                    "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-h7jm-g87p-5935",
                    "reference_id": "GHSA-h7jm-g87p-5935",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-h7jm-g87p-5935"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/65677?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.22",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.22"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/65678?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.11",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.11"
                }
            ],
            "aliases": [
                "CVE-2023-36796",
                "GHSA-h7jm-g87p-5935"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bx3w-bwph-tybw"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5992?format=api",
            "vulnerability_id": "VCID-c1mw-puf5-rydn",
            "summary": "denial of service",
            "references": [
                {
                    "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00108.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00108.html"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-8927",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0031",
                            "scoring_system": "epss",
                            "scoring_elements": "0.54398",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-8927"
                },
                {
                    "reference_url": "https://github.com/bitemyapp/brotli2-rs/issues/45",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/bitemyapp/brotli2-rs/issues/45"
                },
                {
                    "reference_url": "https://github.com/github/advisory-database/issues/785",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/github/advisory-database/issues/785"
                },
                {
                    "reference_url": "https://github.com/google/brotli/commit/223d80cfbec8fd346e32906c732c8ede21f0cea6",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/google/brotli/commit/223d80cfbec8fd346e32906c732c8ede21f0cea6"
                },
                {
                    "reference_url": "https://github.com/google/brotli/releases/tag/v1.0.8",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/google/brotli/releases/tag/v1.0.8"
                },
                {
                    "reference_url": "https://github.com/google/brotli/releases/tag/v1.0.9",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/google/brotli/releases/tag/v1.0.9"
                },
                {
                    "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2020-29.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2020-29.yaml"
                },
                {
                    "reference_url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00003.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00003.html"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH/"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6/"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6/"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP/"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I/"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK/"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG"
                },
                {
                    "reference_url": "https://rustsec.org/advisories/RUSTSEC-2021-0131.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://rustsec.org/advisories/RUSTSEC-2021-0131.html"
                },
                {
                    "reference_url": "https://rustsec.org/advisories/RUSTSEC-2021-0132.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://rustsec.org/advisories/RUSTSEC-2021-0132.html"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4568-1",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4568-1"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4568-1/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4568-1/"
                },
                {
                    "reference_url": "https://www.debian.org/security/2020/dsa-4801",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://www.debian.org/security/2020/dsa-4801"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-202009-12",
                    "reference_id": "ASA-202009-12",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-202009-12"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-202009-13",
                    "reference_id": "ASA-202009-13",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-202009-13"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-1230",
                    "reference_id": "AVG-1230",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Medium",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-1230"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-1231",
                    "reference_id": "AVG-1231",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Medium",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-1231"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927",
                    "reference_id": "CVE-2020-8927",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-5v8v-66v8-mwm7",
                    "reference_id": "GHSA-5v8v-66v8-mwm7",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "cvssv3.1_qr",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/advisories/GHSA-5v8v-66v8-mwm7"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/76987?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.3",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.3"
                }
            ],
            "aliases": [
                "CVE-2020-8927",
                "GHSA-5v8v-66v8-mwm7",
                "PYSEC-2020-29"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c1mw-puf5-rydn"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/15209?format=api",
            "vulnerability_id": "VCID-c23g-vu8z-3ycc",
            "summary": "This advisory has been marked as False-Positive and removed.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-24512",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36567",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-24512"
                },
                {
                    "reference_url": "https://github.com/dotnet/announcements/issues/213",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/announcements/issues/213"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/"
                },
                {
                    "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/"
                },
                {
                    "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24512",
                    "reference_id": "CVE-2022-24512",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24512"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
                    "reference_id": "CVE-2022-24512",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
                },
                {
                    "reference_url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
                    "reference_id": "CVE-2022-24512",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-c6w8-7mp3-34j9",
                    "reference_id": "GHSA-c6w8-7mp3-34j9",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "cvssv3.1_qr",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
                },
                {
                    "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
                    "reference_id": "GHSA-c6w8-7mp3-34j9",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "cvssv3.1_qr",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/76987?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.3",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.3"
                }
            ],
            "aliases": [
                "CVE-2022-24512",
                "GHSA-c6w8-7mp3-34j9"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c23g-vu8z-3ycc"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17788?format=api",
            "vulnerability_id": "VCID-fjvh-u5ag-wqdb",
            "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-29331",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01128",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78611",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-29331"
                },
                {
                    "reference_url": "https://github.com/dotnet/announcements/issues/257",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/announcements/issues/257"
                },
                {
                    "reference_url": "https://support.microsoft.com/kb/5025823",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://support.microsoft.com/kb/5025823"
                },
                {
                    "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331",
                    "reference_id": "CVE-2023-29331",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29331",
                    "reference_id": "CVE-2023-29331",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29331"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-555c-2p6r-68mm",
                    "reference_id": "GHSA-555c-2p6r-68mm",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-555c-2p6r-68mm"
                },
                {
                    "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-555c-2p6r-68mm",
                    "reference_id": "GHSA-555c-2p6r-68mm",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-555c-2p6r-68mm"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/64290?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.18",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.18"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/64291?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.7",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.7"
                }
            ],
            "aliases": [
                "CVE-2023-29331",
                "GHSA-555c-2p6r-68mm"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fjvh-u5ag-wqdb"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17798?format=api",
            "vulnerability_id": "VCID-jxkp-swjn-j3fw",
            "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n.NET and Visual Studio Remote Code Execution Vulnerability",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-33126",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00873",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75564",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-33126"
                },
                {
                    "reference_url": "https://github.com/dotnet/announcements/issues/254",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/announcements/issues/254"
                },
                {
                    "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33126",
                    "reference_id": "CVE-2023-33126",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33126"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33126",
                    "reference_id": "CVE-2023-33126",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33126"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-gh24-9qjj-mr67",
                    "reference_id": "GHSA-gh24-9qjj-mr67",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-gh24-9qjj-mr67"
                },
                {
                    "reference_url": "https://github.com/dotnet/sdk/security/advisories/GHSA-gh24-9qjj-mr67",
                    "reference_id": "GHSA-gh24-9qjj-mr67",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/sdk/security/advisories/GHSA-gh24-9qjj-mr67"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/64290?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.18",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.18"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/64291?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.7",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.7"
                }
            ],
            "aliases": [
                "CVE-2023-33126",
                "GHSA-gh24-9qjj-mr67"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jxkp-swjn-j3fw"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/18418?format=api",
            "vulnerability_id": "VCID-ps42-drvv-87g4",
            "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nVisual Studio Remote Code Execution Vulnerability",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-36793",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01162",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78914",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-36793"
                },
                {
                    "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36793",
                    "reference_id": "CVE-2023-36793",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36793"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36793",
                    "reference_id": "CVE-2023-36793",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36793"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-g4p8-g7mq-wpx4",
                    "reference_id": "GHSA-g4p8-g7mq-wpx4",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-g4p8-g7mq-wpx4"
                },
                {
                    "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-g4p8-g7mq-wpx4",
                    "reference_id": "GHSA-g4p8-g7mq-wpx4",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-g4p8-g7mq-wpx4"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/65677?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.22",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.22"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/65678?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.11",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.11"
                }
            ],
            "aliases": [
                "CVE-2023-36793",
                "GHSA-g4p8-g7mq-wpx4"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ps42-drvv-87g4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/18421?format=api",
            "vulnerability_id": "VCID-yyz5-37um-vuhx",
            "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nVisual Studio Remote Code Execution Vulnerability",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-36794",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00749",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7344",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-36794"
                },
                {
                    "reference_url": "https://github.com/dotnet/runtime/issues/91946",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/runtime/issues/91946"
                },
                {
                    "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36794",
                    "reference_id": "CVE-2023-36794",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36794"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36794",
                    "reference_id": "CVE-2023-36794",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36794"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-38fq-h5hc-gwv8",
                    "reference_id": "GHSA-38fq-h5hc-gwv8",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-38fq-h5hc-gwv8"
                },
                {
                    "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-38fq-h5hc-gwv8",
                    "reference_id": "GHSA-38fq-h5hc-gwv8",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-38fq-h5hc-gwv8"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/65677?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.22",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.22"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/65678?format=api",
                    "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.11",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.11"
                }
            ],
            "aliases": [
                "CVE-2023-36794",
                "GHSA-38fq-h5hc-gwv8"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yyz5-37um-vuhx"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.0"
}