GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/38990?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38990?format=api",
    "vulnerability_id": "VCID-5jax-ejtq-hken",
    "summary": "Improper Restriction of Operations within the Bounds of a Memory Buffer\nIllegal Media Range in Accept Header Causes `StackOverflowError` leading to Denial of Service.",
    "aliases": [
        {
            "alias": "CVE-2017-1000118"
        },
        {
            "alias": "GHSA-gfx6-ph4q-q54q"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56908?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56919?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.6"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/213574?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core@3.0.0-RC1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core@3.0.0-RC1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/54390?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core@10.0.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core@10.0.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227600?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4-ARTERY-M1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4-ARTERY-M1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227601?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4-ARTERY-M2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4-ARTERY-M2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227602?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4-ARTERY-M3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4-ARTERY-M3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227603?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4-ARTERY-M4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4-ARTERY-M4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227604?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.2-RC1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.2-RC1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227605?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.2-RC2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.2-RC2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227606?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.2-RC3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.2-RC3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227607?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227608?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227609?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227610?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227611?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227612?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.7",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227613?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227614?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.9-RC1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.9-RC1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227615?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.9-RC2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.9-RC2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227616?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.9",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.9"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227617?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.10",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.10"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227618?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.11",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.11"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227619?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.11.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.11.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227620?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.11.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@2.4.11.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227621?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@3.0.0-RC1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@3.0.0-RC1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227622?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.0-RC2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.0-RC2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227623?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227624?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227625?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227626?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227627?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227628?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.11@10.0.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227787?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.0-RC2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.0-RC2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227788?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227789?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227790?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227791?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227792?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/227793?format=api",
            "purl": "pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5jax-ejtq-hken"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-http-core_2.12@10.0.5"
        }
    ],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000118",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00389",
                    "scoring_system": "epss",
                    "scoring_elements": "0.60291",
                    "published_at": "2026-06-04T12:55:00Z"
                },
                {
                    "value": "0.00389",
                    "scoring_system": "epss",
                    "scoring_elements": "0.60328",
                    "published_at": "2026-06-07T12:55:00Z"
                },
                {
                    "value": "0.00389",
                    "scoring_system": "epss",
                    "scoring_elements": "0.60338",
                    "published_at": "2026-06-05T12:55:00Z"
                },
                {
                    "value": "0.00389",
                    "scoring_system": "epss",
                    "scoring_elements": "0.6034",
                    "published_at": "2026-06-06T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000118"
        },
        {
            "reference_url": "https://doc.akka.io/docs/akka-http/10.0.6/security/2017-05-03-illegal-media-range-in-accept-header-causes-stackoverflowerror.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                },
                {
                    "value": "HIGH",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://doc.akka.io/docs/akka-http/10.0.6/security/2017-05-03-illegal-media-range-in-accept-header-causes-stackoverflowerror.html"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000118",
            "reference_id": "CVE-2017-1000118",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                },
                {
                    "value": "HIGH",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000118"
        },
        {
            "reference_url": "https://github.com/advisories/GHSA-gfx6-ph4q-q54q",
            "reference_id": "GHSA-gfx6-ph4q-q54q",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                },
                {
                    "value": "HIGH",
                    "scoring_system": "cvssv3.1_qr",
                    "scoring_elements": ""
                },
                {
                    "value": "HIGH",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/advisories/GHSA-gfx6-ph4q-q54q"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 1035,
            "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."
        },
        {
            "cwe_id": 119,
            "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
            "description": "The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer."
        },
        {
            "cwe_id": 937,
            "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."
        }
    ],
    "exploits": [],
    "severity_range_score": "7.0 - 8.9",
    "exploitability": "0.5",
    "weighted_severity": "8.0",
    "risk_score": 4.0,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5jax-ejtq-hken"
}