Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/52193?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52193?format=api", "vulnerability_id": "VCID-4nu3-fknt-puej", "summary": "snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write\nUsing snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.", "aliases": [ { "alias": "CVE-2022-38750" }, { "alias": "GHSA-hhhw-99gj-p3c3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/939599?format=api", "purl": "pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.28-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/939595?format=api", "purl": "pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.28-1%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050761?format=api", "purl": "pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.28-1%252Bdeb11u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/939598?format=api", "purl": "pkg:deb/debian/snakeyaml@1.31-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.31-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/939593?format=api", "purl": "pkg:deb/debian/snakeyaml@1.33-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.33-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/939597?format=api", "purl": "pkg:deb/debian/snakeyaml@2.0%2Bds%2Breally1.33-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@2.0%252Bds%252Breally1.33-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/939596?format=api", "purl": "pkg:deb/debian/snakeyaml@2.5%2Bds-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@2.5%252Bds-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/85717?format=api", "purl": "pkg:ebuild/dev-java/snakeyaml@1.33", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-java/snakeyaml@1.33" }, { "url": "http://public2.vulnerablecode.io/api/packages/79975?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.31", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.31" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050758?format=api", "purl": "pkg:deb/debian/snakeyaml@1.12-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.12-2" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050759?format=api", "purl": "pkg:deb/debian/snakeyaml@1.17-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.17-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050760?format=api", "purl": "pkg:deb/debian/snakeyaml@1.23-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.23-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/197931?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/197932?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/197933?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/197934?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/197935?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/197936?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/197937?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/197938?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/197939?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/197940?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/197941?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/197942?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/197943?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/197944?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/197945?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/197946?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/197947?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/197948?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/197949?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/197950?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/197951?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.24" }, { "url": "http://public2.vulnerablecode.io/api/packages/197952?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/76440?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.26", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.26" }, { "url": "http://public2.vulnerablecode.io/api/packages/326657?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.27", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.27" }, { "url": "http://public2.vulnerablecode.io/api/packages/326658?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/326659?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/326660?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/96695?format=api", "purl": "pkg:rpm/redhat/candlepin@4.2.13-1?arch=el8sat", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2cup-9gdn-yyhk" }, { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-9h46-72hw-bkcr" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-j986-mtma-b3bw" }, { "vulnerability": "VCID-mbst-3bec-ykcq" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qub7-qp14-uqcg" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-v2pq-1qhm-4qb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/candlepin@4.2.13-1%3Farch=el8sat" }, { "url": "http://public2.vulnerablecode.io/api/packages/96973?format=api", "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1?arch=el7sso", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2xyb-g3n4-n3ca" }, { "vulnerability": "VCID-3s9f-prpy-hbcx" }, { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-4v1f-kt5y-w7d1" }, { "vulnerability": "VCID-5618-53yg-8qh4" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-7j7q-m1zp-zfac" }, { "vulnerability": "VCID-9h46-72hw-bkcr" }, { "vulnerability": "VCID-cvxp-ctj9-guej" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-dxj3-8sk5-mfdy" }, { "vulnerability": "VCID-ebn8-cjqs-k3ad" }, { "vulnerability": "VCID-gp47-t3vm-57an" }, { "vulnerability": "VCID-hbwg-ebvx-k7e1" }, { "vulnerability": "VCID-kexn-gjxj-uudm" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-myp4-24sf-9yfv" }, { "vulnerability": "VCID-netd-rr9e-wbg5" }, { "vulnerability": "VCID-ptd4-8f7f-hyg6" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqx4-euc2-myew" }, { "vulnerability": "VCID-turp-dju7-c7fx" }, { "vulnerability": "VCID-v2pq-1qhm-4qb9" }, { "vulnerability": "VCID-vfsr-kypp-wbea" }, { "vulnerability": "VCID-wp9q-eurd-43dx" }, { "vulnerability": "VCID-xy58-u3se-wfdb" }, { "vulnerability": "VCID-xzs8-rbhd-mkbp" }, { "vulnerability": "VCID-y1np-kma2-ayfn" }, { "vulnerability": "VCID-y3ey-aab7-q3fk" }, { "vulnerability": "VCID-y8up-mkx2-abcn" }, { "vulnerability": "VCID-y9aa-2a31-ufa7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1%3Farch=el7sso" }, { "url": "http://public2.vulnerablecode.io/api/packages/96972?format=api", "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1?arch=el9sso", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2xyb-g3n4-n3ca" }, { "vulnerability": "VCID-3s9f-prpy-hbcx" }, { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-4v1f-kt5y-w7d1" }, { "vulnerability": "VCID-5618-53yg-8qh4" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-7j7q-m1zp-zfac" }, { "vulnerability": "VCID-9h46-72hw-bkcr" }, { "vulnerability": "VCID-cvxp-ctj9-guej" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-dxj3-8sk5-mfdy" }, { "vulnerability": "VCID-ebn8-cjqs-k3ad" }, { "vulnerability": "VCID-gp47-t3vm-57an" }, { "vulnerability": "VCID-hbwg-ebvx-k7e1" }, { "vulnerability": "VCID-kexn-gjxj-uudm" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-myp4-24sf-9yfv" }, { "vulnerability": "VCID-netd-rr9e-wbg5" }, { "vulnerability": "VCID-ptd4-8f7f-hyg6" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqx4-euc2-myew" }, { "vulnerability": "VCID-turp-dju7-c7fx" }, { "vulnerability": "VCID-v2pq-1qhm-4qb9" }, { "vulnerability": "VCID-vfsr-kypp-wbea" }, { "vulnerability": "VCID-wp9q-eurd-43dx" }, { "vulnerability": "VCID-xy58-u3se-wfdb" }, { "vulnerability": "VCID-xzs8-rbhd-mkbp" }, { "vulnerability": "VCID-y1np-kma2-ayfn" }, { "vulnerability": "VCID-y3ey-aab7-q3fk" }, { "vulnerability": "VCID-y8up-mkx2-abcn" }, { "vulnerability": "VCID-y9aa-2a31-ufa7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1%3Farch=el9sso" }, { "url": "http://public2.vulnerablecode.io/api/packages/96971?format=api", "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1?arch=el8sso", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2xyb-g3n4-n3ca" }, { "vulnerability": "VCID-3s9f-prpy-hbcx" }, { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-4v1f-kt5y-w7d1" }, { "vulnerability": "VCID-5618-53yg-8qh4" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-7j7q-m1zp-zfac" }, { "vulnerability": "VCID-9h46-72hw-bkcr" }, { "vulnerability": "VCID-cvxp-ctj9-guej" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-dxj3-8sk5-mfdy" }, { "vulnerability": "VCID-ebn8-cjqs-k3ad" }, { "vulnerability": "VCID-gp47-t3vm-57an" }, { "vulnerability": "VCID-hbwg-ebvx-k7e1" }, { "vulnerability": "VCID-kexn-gjxj-uudm" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-myp4-24sf-9yfv" }, { "vulnerability": "VCID-netd-rr9e-wbg5" }, { "vulnerability": "VCID-ptd4-8f7f-hyg6" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqx4-euc2-myew" }, { "vulnerability": "VCID-turp-dju7-c7fx" }, { "vulnerability": "VCID-v2pq-1qhm-4qb9" }, { "vulnerability": "VCID-vfsr-kypp-wbea" }, { "vulnerability": "VCID-wp9q-eurd-43dx" }, { "vulnerability": "VCID-xy58-u3se-wfdb" }, { "vulnerability": "VCID-xzs8-rbhd-mkbp" }, { "vulnerability": "VCID-y1np-kma2-ayfn" }, { "vulnerability": "VCID-y3ey-aab7-q3fk" }, { "vulnerability": "VCID-y8up-mkx2-abcn" }, { "vulnerability": "VCID-y9aa-2a31-ufa7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1%3Farch=el8sso" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38750.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38750.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-38750", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.36272", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.36228", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.36253", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.36289", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.36284", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.36266", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.36216", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.36382", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.36349", "published_at": "2026-04-02T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-38750" }, { "reference_url": "https://bitbucket.org/snakeyaml/snakeyaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bitbucket.org/snakeyaml/snakeyaml" }, { "reference_url": "https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackoverflow-oss-fuzz-47027", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-15T18:43:03Z/" } ], "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackoverflow-oss-fuzz-47027" }, { "reference_url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-15T18:43:03Z/" } ], "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38750", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38750" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-15T18:43:03Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38750", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38750" }, { "reference_url": "https://security.gentoo.org/glsa/202305-28", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-15T18:43:03Z/" } ], "url": "https://security.gentoo.org/glsa/202305-28" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240315-0010", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20240315-0010" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129707", "reference_id": "2129707", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129707" }, { "reference_url": "https://github.com/advisories/GHSA-hhhw-99gj-p3c3", "reference_id": "GHSA-hhhw-99gj-p3c3", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hhhw-99gj-p3c3" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240315-0010/", "reference_id": "ntap-20240315-0010", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-15T18:43:03Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240315-0010/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:6757", "reference_id": "RHSA-2022:6757", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:6757" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8524", "reference_id": "RHSA-2022:8524", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8524" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8876", "reference_id": "RHSA-2022:8876", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8876" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2097", "reference_id": "RHSA-2023:2097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2100", "reference_id": "RHSA-2023:2100", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2100" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3641", "reference_id": "RHSA-2023:3641", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3641" }, { "reference_url": "https://usn.ubuntu.com/5944-1/", "reference_id": "USN-5944-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5944-1/" } ], "weaknesses": [ { "cwe_id": 121, "name": "Stack-based Buffer Overflow", "description": "A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function)." }, { "cwe_id": 787, "name": "Out-of-bounds Write", "description": "The product writes data past the end, or before the beginning, of the intended buffer." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "4.0 - 7.5", "exploitability": "0.5", "weighted_severity": "6.2", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4nu3-fknt-puej" }