Lookup for vulnerable packages by Package URL.

GET /api/packages/937086?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
    "type": "deb",
    "namespace": "debian",
    "name": "qemu",
    "version": "1:2.8+dfsg-1",
    "qualifiers": {
        "distro": "trixie"
    },
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "1:2.8+dfsg-2",
    "latest_non_vulnerable_version": "1:11.0.0+ds-1",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61921?format=api",
            "vulnerability_id": "VCID-1c93-u2ze-jyg9",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7994.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7994.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7994",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35499",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.357",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35727",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35607",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35653",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35677",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35686",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35642",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3562",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35659",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35649",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35598",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35359",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7994"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7994",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7994"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1382666",
                    "reference_id": "1382666",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1382666"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840228",
                    "reference_id": "840228",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840228"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-7994"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1c93-u2ze-jyg9"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48344?format=api",
            "vulnerability_id": "VCID-32c4-eqrz-cfd5",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9101.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9101.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9101",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30323",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30354",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30401",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30216",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30276",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30311",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30315",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3027",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30224",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30238",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3022",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30175",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30111",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9101"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9101",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9101"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389538",
                    "reference_id": "1389538",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389538"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842455",
                    "reference_id": "842455",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842455"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9101"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-32c4-eqrz-cfd5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61922?format=api",
            "vulnerability_id": "VCID-33hx-334p-myag",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8576.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8576.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8576",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29957",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29999",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30047",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29861",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29923",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29959",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29964",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29917",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29868",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29886",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29866",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2982",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00113",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29744",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8576"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8576",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8576"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.4",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:C"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1333425",
                    "reference_id": "1333425",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1333425"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840343",
                    "reference_id": "840343",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840343"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2392",
                    "reference_id": "RHSA-2017:2392",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2392"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2408",
                    "reference_id": "RHSA-2017:2408",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2408"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-8576"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-33hx-334p-myag"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61919?format=api",
            "vulnerability_id": "VCID-5fu6-gkdc-sfhq",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7908.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7908.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7908",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00129",
                            "scoring_system": "epss",
                            "scoring_elements": "0.32309",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00129",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3246",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00129",
                            "scoring_system": "epss",
                            "scoring_elements": "0.32496",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00129",
                            "scoring_system": "epss",
                            "scoring_elements": "0.32318",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00129",
                            "scoring_system": "epss",
                            "scoring_elements": "0.32367",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00129",
                            "scoring_system": "epss",
                            "scoring_elements": "0.32395",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00129",
                            "scoring_system": "epss",
                            "scoring_elements": "0.32397",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00129",
                            "scoring_system": "epss",
                            "scoring_elements": "0.32359",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00129",
                            "scoring_system": "epss",
                            "scoring_elements": "0.32332",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00129",
                            "scoring_system": "epss",
                            "scoring_elements": "0.32369",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00129",
                            "scoring_system": "epss",
                            "scoring_elements": "0.32346",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00129",
                            "scoring_system": "epss",
                            "scoring_elements": "0.32144",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7908"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7908",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7908"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.4",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:C"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1327465",
                    "reference_id": "1327465",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1327465"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=839835",
                    "reference_id": "839835",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=839835"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-7908"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5fu6-gkdc-sfhq"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48349?format=api",
            "vulnerability_id": "VCID-5xxx-u1x4-dfah",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9908.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.1",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9908.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9908",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00074",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22259",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00074",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22426",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00074",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22471",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00074",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22341",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00074",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22397",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00074",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22417",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00074",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22376",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00074",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22318",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00074",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22333",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00074",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22326",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00074",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22275",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00074",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22126",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9908"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9908",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9908"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:P/I:N/A:N"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402262",
                    "reference_id": "1402262",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402262"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847400",
                    "reference_id": "847400",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847400"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3268-1/",
                    "reference_id": "USN-3268-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3268-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9908"
            ],
            "risk_score": 1.9,
            "exploitability": "0.5",
            "weighted_severity": "3.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5xxx-u1x4-dfah"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48350?format=api",
            "vulnerability_id": "VCID-5zfh-ajn1-fqbb",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9911.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9911.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9911",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35975",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36166",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36196",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36032",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36081",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36099",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36106",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36067",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36041",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36082",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36068",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36016",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35788",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9911"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9911",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9911"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402272",
                    "reference_id": "1402272",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402272"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847951",
                    "reference_id": "847951",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847951"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2392",
                    "reference_id": "RHSA-2017:2392",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2392"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2408",
                    "reference_id": "RHSA-2017:2408",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2408"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9911"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5zfh-ajn1-fqbb"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48345?format=api",
            "vulnerability_id": "VCID-77re-jhdj-syg6",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9776.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9776.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9776",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.19862",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.19725",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.19817",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.19829",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2001",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.20068",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.19795",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.19875",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.19929",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.19938",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.19895",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.19837",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00064",
                            "scoring_system": "epss",
                            "scoring_elements": "0.19813",
                            "published_at": "2026-04-16T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9776"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9776",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9776"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        },
                        {
                            "value": "3",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400829",
                    "reference_id": "1400829",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400829"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=846797",
                    "reference_id": "846797",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=846797"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9776"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-77re-jhdj-syg6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61927?format=api",
            "vulnerability_id": "VCID-8822-6d2n-x7a6",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8909.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8909.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8909",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.11073",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.11216",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.11279",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.11092",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.11172",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.11228",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.11237",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.11205",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.11179",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.11044",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.11053",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.11185",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00037",
                            "scoring_system": "epss",
                            "scoring_elements": "0.1112",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8909"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8909",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8909"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "2.1",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:H/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388052",
                    "reference_id": "1388052",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388052"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841950",
                    "reference_id": "841950",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841950"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2392",
                    "reference_id": "RHSA-2017:2392",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2392"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2408",
                    "reference_id": "RHSA-2017:2408",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2408"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-8909"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8822-6d2n-x7a6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48353?format=api",
            "vulnerability_id": "VCID-ab2e-uu8h-7qhx",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9914.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9914.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9914",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2174",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21905",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21958",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21724",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21801",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21857",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21869",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21829",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21771",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21772",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21778",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21743",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21596",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9914"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9914",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9914"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402276",
                    "reference_id": "1402276",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402276"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847496",
                    "reference_id": "847496",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847496"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3268-1/",
                    "reference_id": "USN-3268-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3268-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9914"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ab2e-uu8h-7qhx"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48358?format=api",
            "vulnerability_id": "VCID-axzq-sq7f-7yau",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9923.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.1",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9923.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9923",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35716",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35913",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35944",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35775",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35825",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35848",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35855",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35814",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35791",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3583",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35818",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35769",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00151",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35537",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9923"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9923",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9923"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402967",
                    "reference_id": "1402967",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402967"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847957",
                    "reference_id": "847957",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847957"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9923"
            ],
            "risk_score": 1.9,
            "exploitability": "0.5",
            "weighted_severity": "3.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-axzq-sq7f-7yau"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48352?format=api",
            "vulnerability_id": "VCID-b2wb-y2qf-afh7",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9913.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9913.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9913",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2174",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21905",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21958",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21724",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21801",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21857",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21869",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21829",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21771",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21772",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21778",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21743",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21596",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9913"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9913",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9913"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402276",
                    "reference_id": "1402276",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402276"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847496",
                    "reference_id": "847496",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847496"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9913"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b2wb-y2qf-afh7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61929?format=api",
            "vulnerability_id": "VCID-bnve-337x-4ya9",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9102.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9102.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9102",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00101",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27974",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00101",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28047",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00101",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28089",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00101",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27883",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00101",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2795",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00101",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27991",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00101",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27994",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00101",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27951",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00101",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27892",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00101",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27901",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00101",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2784",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00101",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27756",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9102"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9102",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9102"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389550",
                    "reference_id": "1389550",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389550"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463",
                    "reference_id": "842463",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9102"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bnve-337x-4ya9"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84834?format=api",
            "vulnerability_id": "VCID-d5vs-qw4m-ryes",
            "summary": "Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
            "references": [
                {
                    "reference_url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=4299b90e9ba9ce5ca9024572804ba751aa1a7e70",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=4299b90e9ba9ce5ca9024572804ba751aa1a7e70"
                },
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9922.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9922.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9922",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.25988",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.258",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.25911",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.25892",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.25863",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26072",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26112",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2588",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2595",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26001",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26011",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.25966",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00092",
                            "scoring_system": "epss",
                            "scoring_elements": "0.25907",
                            "published_at": "2026-04-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9922"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9922",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9922"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
                },
                {
                    "reference_url": "https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html"
                },
                {
                    "reference_url": "http://www.openwall.com/lists/oss-security/2016/12/09/1",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
                },
                {
                    "reference_url": "http://www.securityfocus.com/bid/94803",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.securityfocus.com/bid/94803"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1334398",
                    "reference_id": "1334398",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1334398"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847960",
                    "reference_id": "847960",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847960"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qemu:qemu:2.8.0:rc0:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:qemu:qemu:2.8.0:rc0:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qemu:qemu:2.8.0:rc0:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qemu:qemu:2.8.0:rc1:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:qemu:qemu:2.8.0:rc1:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qemu:qemu:2.8.0:rc1:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qemu:qemu:2.8.0:rc2:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:qemu:qemu:2.8.0:rc2:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qemu:qemu:2.8.0:rc2:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9922",
                    "reference_id": "CVE-2016-9922",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "2.1",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:L/Au:N/C:N/I:N/A:P"
                        },
                        {
                            "value": "5.5",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9922"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2392",
                    "reference_id": "RHSA-2017:2392",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2392"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2408",
                    "reference_id": "RHSA-2017:2408",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2408"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9922"
            ],
            "risk_score": 2.5,
            "exploitability": "0.5",
            "weighted_severity": "5.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d5vs-qw4m-ryes"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48354?format=api",
            "vulnerability_id": "VCID-drpd-g9w1-t7ad",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9915.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9915.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9915",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2174",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21905",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21958",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21724",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21801",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21857",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21869",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21829",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21771",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21772",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21778",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21743",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21596",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9915"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9915",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9915"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402276",
                    "reference_id": "1402276",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402276"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847496",
                    "reference_id": "847496",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847496"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9915"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-drpd-g9w1-t7ad"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48346?format=api",
            "vulnerability_id": "VCID-du84-jfqv-q3hu",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9845.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.1",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9845.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9845",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26526",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26577",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26622",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26407",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26476",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26525",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26532",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26486",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26428",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26434",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26404",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26368",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00095",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26301",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9845"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9845",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9845"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:H/Au:S/C:P/I:N/A:N"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402245",
                    "reference_id": "1402245",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402245"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847381",
                    "reference_id": "847381",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847381"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9845"
            ],
            "risk_score": 1.9,
            "exploitability": "0.5",
            "weighted_severity": "3.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-du84-jfqv-q3hu"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61924?format=api",
            "vulnerability_id": "VCID-e2th-bfpw-jfcz",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8578.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8578.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8578",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29517",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29584",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29633",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29455",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29557",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29559",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29514",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29462",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29481",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29453",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29407",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29291",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8578"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8578",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8578"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.4",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:C"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1383291",
                    "reference_id": "1383291",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1383291"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840340",
                    "reference_id": "840340",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840340"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-8578"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e2th-bfpw-jfcz"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61923?format=api",
            "vulnerability_id": "VCID-eqw6-1x15-jqb9",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8577.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8577.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8577",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29517",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29584",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29633",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29455",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29557",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29559",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29514",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29462",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29481",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29453",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29407",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29291",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8577"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8577",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8577"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.4",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:C"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1383285",
                    "reference_id": "1383285",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1383285"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840341",
                    "reference_id": "840341",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840341"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-8577"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eqw6-1x15-jqb9"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61920?format=api",
            "vulnerability_id": "VCID-ezt6-c9hq-m3aq",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7909.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7909.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7909",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.33368",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.33505",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.33538",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.33379",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.33423",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.33458",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.33461",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3342",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.33396",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.33432",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.33407",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.33376",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.33221",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7909"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7909",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7909"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.4",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:C"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1329538",
                    "reference_id": "1329538",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1329538"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=839834",
                    "reference_id": "839834",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=839834"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-7909"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ezt6-c9hq-m3aq"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48348?format=api",
            "vulnerability_id": "VCID-gysr-zvcz-1yfm",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9907.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9907.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9907",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35975",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36166",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36196",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36032",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36081",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36099",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36106",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36067",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36041",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36082",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36068",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36016",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00153",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35788",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9907"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9907",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9907"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402265",
                    "reference_id": "1402265",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402265"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847953",
                    "reference_id": "847953",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847953"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2392",
                    "reference_id": "RHSA-2017:2392",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2392"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2408",
                    "reference_id": "RHSA-2017:2408",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2408"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9907"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gysr-zvcz-1yfm"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61928?format=api",
            "vulnerability_id": "VCID-hu58-m2w7-qkeu",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8910.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8910.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8910",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00098",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27057",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00098",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26842",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.00098",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26951",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00098",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2689",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00098",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27097",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00098",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27133",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00098",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26925",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00098",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26993",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00098",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27039",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00098",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27042",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00098",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26998",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00098",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26941",
                            "published_at": "2026-04-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8910"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8910",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8910"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:M/Au:S/C:N/I:N/A:P"
                        },
                        {
                            "value": "3",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388046",
                    "reference_id": "1388046",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388046"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841955",
                    "reference_id": "841955",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841955"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2392",
                    "reference_id": "RHSA-2017:2392",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2392"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2408",
                    "reference_id": "RHSA-2017:2408",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2408"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-8910"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hu58-m2w7-qkeu"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61930?format=api",
            "vulnerability_id": "VCID-hvky-8ja9-rye5",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9103.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.1",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9103.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9103",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30467",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30494",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30541",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30351",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30412",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30446",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30448",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30404",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30356",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30373",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30354",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30311",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00117",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30249",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9103"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9103",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9103"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:P/I:N/A:N"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389642",
                    "reference_id": "1389642",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389642"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463",
                    "reference_id": "842463",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9103"
            ],
            "risk_score": 1.9,
            "exploitability": "0.5",
            "weighted_severity": "3.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hvky-8ja9-rye5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61931?format=api",
            "vulnerability_id": "VCID-kcqg-23j8-bqaa",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9104.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9104.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9104",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30323",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30354",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30401",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30216",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30276",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30311",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30315",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3027",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30224",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30238",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3022",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30175",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30111",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9104"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9104",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9104"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:P/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389686",
                    "reference_id": "1389686",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389686"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463",
                    "reference_id": "842463",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9104"
            ],
            "risk_score": 3.0,
            "exploitability": "0.5",
            "weighted_severity": "5.9",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kcqg-23j8-bqaa"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48351?format=api",
            "vulnerability_id": "VCID-m828-1szt-hfb6",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9912.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9912.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9912",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29634",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29701",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29752",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29571",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29633",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29671",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29674",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29629",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29578",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29597",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29572",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.29526",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00111",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2941",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9912"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9912",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9912"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402284",
                    "reference_id": "1402284",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402284"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847391",
                    "reference_id": "847391",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847391"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3268-1/",
                    "reference_id": "USN-3268-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3268-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9912"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m828-1szt-hfb6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84854?format=api",
            "vulnerability_id": "VCID-mb65-h728-fbfj",
            "summary": "Qemu: 9pfs: memory leakage in v9fs_write",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9106.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9106.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9106",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30323",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30354",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30401",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30216",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30276",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30311",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30315",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3027",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30224",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30238",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3022",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30175",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00116",
                            "scoring_system": "epss",
                            "scoring_elements": "0.30111",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9106"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9106",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9106"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389712",
                    "reference_id": "1389712",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389712"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463",
                    "reference_id": "842463",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9106"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mb65-h728-fbfj"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48347?format=api",
            "vulnerability_id": "VCID-qjf9-yvjp-tqef",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9846.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9846.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9846",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24644",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2472",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24759",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24532",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24603",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2465",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24667",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24626",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24569",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24582",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24573",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24548",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00085",
                            "scoring_system": "epss",
                            "scoring_elements": "0.24493",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9846"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9846",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9846"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:P/I:N/A:N"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402255",
                    "reference_id": "1402255",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402255"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847382",
                    "reference_id": "847382",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847382"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9846"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qjf9-yvjp-tqef"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48356?format=api",
            "vulnerability_id": "VCID-r4z8-mhwj-qyhp",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9921.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9921.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9921",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28413",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28488",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2853",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28326",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28391",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28434",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28437",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28394",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28337",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28348",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28279",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28184",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9921"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9921",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9921"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.9",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:N/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1334398",
                    "reference_id": "1334398",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1334398"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847960",
                    "reference_id": "847960",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847960"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2392",
                    "reference_id": "RHSA-2017:2392",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2392"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2408",
                    "reference_id": "RHSA-2017:2408",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2408"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9921"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-r4z8-mhwj-qyhp"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61926?format=api",
            "vulnerability_id": "VCID-ujfw-wu9c-2ff3",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8669.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8669.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8669",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26229",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26312",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26353",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26126",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26193",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26241",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26248",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26203",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26144",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26149",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26124",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26086",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.26024",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8669"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8669",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8669"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.4",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:C"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384909",
                    "reference_id": "1384909",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384909"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840945",
                    "reference_id": "840945",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840945"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2392",
                    "reference_id": "RHSA-2017:2392",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2392"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2408",
                    "reference_id": "RHSA-2017:2408",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2408"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-8669"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ujfw-wu9c-2ff3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84884?format=api",
            "vulnerability_id": "VCID-vuj5-zduc-pkec",
            "summary": "Qemu: usb: hcd-ehci: memory leak in ehci_process_itd",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7995.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7995.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7995",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35499",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.357",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35727",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35607",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35653",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35677",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35686",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35642",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3562",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35659",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35649",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35598",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35359",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7995"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7995",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7995"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1382668",
                    "reference_id": "1382668",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1382668"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840236",
                    "reference_id": "840236",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840236"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-7995"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vuj5-zduc-pkec"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48355?format=api",
            "vulnerability_id": "VCID-w3nb-nbh8-m3fj",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9916.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9916.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9916",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2174",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21905",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21958",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21724",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21801",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21857",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21869",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21829",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21771",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21772",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21778",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21743",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00071",
                            "scoring_system": "epss",
                            "scoring_elements": "0.21596",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9916"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9916",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9916"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402276",
                    "reference_id": "1402276",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402276"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847496",
                    "reference_id": "847496",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847496"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201701-49",
                    "reference_id": "GLSA-201701-49",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201701-49"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3261-1/",
                    "reference_id": "USN-3261-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3261-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9916"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w3nb-nbh8-m3fj"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61925?format=api",
            "vulnerability_id": "VCID-whgj-3n1x-yyes",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8668.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.4",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8668.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8668",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35499",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.357",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35727",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35607",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35653",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35677",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35686",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35642",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3562",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35659",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35649",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35598",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.0015",
                            "scoring_system": "epss",
                            "scoring_elements": "0.35359",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8668"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8668",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8668"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384896",
                    "reference_id": "1384896",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384896"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840948",
                    "reference_id": "840948",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840948"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-8668"
            ],
            "risk_score": 2.5,
            "exploitability": "0.5",
            "weighted_severity": "4.9",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-whgj-3n1x-yyes"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84904?format=api",
            "vulnerability_id": "VCID-xxwr-uyhs-akfj",
            "summary": "Qemu: vmware_vga: OOB stack memory access when processing svga command",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7170.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7170.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7170",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22474",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22648",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22691",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22482",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22563",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22618",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22634",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22592",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22537",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22552",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22546",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22496",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00075",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22341",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7170"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7170",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7170"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.4",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:C"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1374702",
                    "reference_id": "1374702",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1374702"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837316",
                    "reference_id": "837316",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837316"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-7170"
            ],
            "risk_score": 1.6,
            "exploitability": "0.5",
            "weighted_severity": "3.1",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xxwr-uyhs-akfj"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61932?format=api",
            "vulnerability_id": "VCID-z4u5-1yy5-ruhb",
            "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n    which could cause a Denial of Service condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9105.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9105.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9105",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28297",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28369",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28411",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28202",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28269",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28312",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28317",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28273",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28216",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28228",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28211",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28165",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.2808",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9105"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9105",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9105"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "1.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:S/C:P/I:N/A:N"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389702",
                    "reference_id": "1389702",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389702"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463",
                    "reference_id": "842463",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-11",
                    "reference_id": "GLSA-201611-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-11"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3125-1/",
                    "reference_id": "USN-3125-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3125-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937086?format=api",
                    "purl": "pkg:deb/debian/qemu@1:2.8%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937037?format=api",
                    "purl": "pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3kyg-9mf3-kfft"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-6qnt-yaa3-p3bb"
                        },
                        {
                            "vulnerability": "VCID-cenj-mz55-jbg6"
                        },
                        {
                            "vulnerability": "VCID-d2ve-dnmj-4bbz"
                        },
                        {
                            "vulnerability": "VCID-ej5p-r4az-6ud2"
                        },
                        {
                            "vulnerability": "VCID-ewb7-nrtu-g7ex"
                        },
                        {
                            "vulnerability": "VCID-gc6n-kgsc-f3b6"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-mtj9-1cns-yybw"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-p2dz-mtns-5bb4"
                        },
                        {
                            "vulnerability": "VCID-ptty-88p4-ybe9"
                        },
                        {
                            "vulnerability": "VCID-pxjg-chmx-nkdc"
                        },
                        {
                            "vulnerability": "VCID-qh2s-apkz-sbaz"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-t5gq-4bhn-gkej"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-w7gc-1eh2-3ufu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937035?format=api",
                    "purl": "pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-hkf8-96k7-kuc9"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-t58m-9jqp-43c9"
                        },
                        {
                            "vulnerability": "VCID-uzxc-npak-yyc4"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937040?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-n71j-fz74-kyhf"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937038?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-9szt-c829-zfdh"
                        },
                        {
                            "vulnerability": "VCID-detn-3zsq-3qh7"
                        },
                        {
                            "vulnerability": "VCID-m47q-17n6-t7gg"
                        },
                        {
                            "vulnerability": "VCID-vcun-y6d5-6uby"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/937039?format=api",
                    "purl": "pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1j9f-u62h-rug2"
                        },
                        {
                            "vulnerability": "VCID-46gg-8h8g-2kf5"
                        },
                        {
                            "vulnerability": "VCID-4mt9-kf9m-2fbz"
                        },
                        {
                            "vulnerability": "VCID-n9n4-prkb-f3c6"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1076120?format=api",
                    "purl": "pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2016-9105"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z4u5-1yy5-ruhb"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:2.8%252Bdfsg-1%3Fdistro=trixie"
}