Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-qmy2-2q3f-7kar
SummaryAffected versions of the package are vulnerable to Elliptic Curve Key Disclosure.
Aliases
0
alias GHSA-h6wq-jw7q-grxv
Fixed_packages
0
url pkg:maven/org.bitbucket.b_c/jose4j@0.5.5
purl pkg:maven/org.bitbucket.b_c/jose4j@0.5.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mj8-rxf8-qyau
1
vulnerability VCID-h1az-byzj-z3gq
2
vulnerability VCID-nuak-t68p-tuhr
3
vulnerability VCID-wfmh-pkck-yfb3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.bitbucket.b_c/jose4j@0.5.5
Affected_packages
0
url pkg:maven/org.bitbucket.b_c/jose4j@0.3.6
purl pkg:maven/org.bitbucket.b_c/jose4j@0.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mj8-rxf8-qyau
1
vulnerability VCID-h1az-byzj-z3gq
2
vulnerability VCID-nuak-t68p-tuhr
3
vulnerability VCID-qmy2-2q3f-7kar
4
vulnerability VCID-wfmh-pkck-yfb3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.bitbucket.b_c/jose4j@0.3.6
References
0
reference_url https://bitbucket.org/b_c/jose4j/commits/0517896170af8d5c057407c70a7b08dae454829e
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/b_c/jose4j/commits/0517896170af8d5c057407c70a7b08dae454829e
1
reference_url https://www.whitesourcesoftware.com/vulnerability-database/WS-2017-0208
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.whitesourcesoftware.com/vulnerability-database/WS-2017-0208
2
reference_url https://github.com/advisories/GHSA-h6wq-jw7q-grxv
reference_id GHSA-h6wq-jw7q-grxv
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h6wq-jw7q-grxv
Weaknesses
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-qmy2-2q3f-7kar