Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/52318?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52318?format=api", "vulnerability_id": "VCID-6354-p39b-zbhp", "summary": "snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write\nUsing snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.", "aliases": [ { "alias": "CVE-2022-38749" }, { "alias": "GHSA-c4r9-r8fh-9vj2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/939599?format=api", "purl": "pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.28-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050761?format=api", "purl": "pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.28-1%252Bdeb11u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/939595?format=api", "purl": "pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.28-1%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/939598?format=api", "purl": "pkg:deb/debian/snakeyaml@1.31-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.31-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/939593?format=api", "purl": "pkg:deb/debian/snakeyaml@1.33-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.33-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/939597?format=api", "purl": "pkg:deb/debian/snakeyaml@2.0%2Bds%2Breally1.33-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@2.0%252Bds%252Breally1.33-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/939596?format=api", "purl": "pkg:deb/debian/snakeyaml@2.5%2Bds-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@2.5%252Bds-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/85717?format=api", "purl": "pkg:ebuild/dev-java/snakeyaml@1.33", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-java/snakeyaml@1.33" }, { "url": "http://public2.vulnerablecode.io/api/packages/326869?format=api", "purl": "pkg:maven/io.prometheus.jmx/jmx_prometheus_httpserver@0.17.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/io.prometheus.jmx/jmx_prometheus_httpserver@0.17.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79975?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.31", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.31" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050758?format=api", "purl": "pkg:deb/debian/snakeyaml@1.12-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.12-2" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050759?format=api", "purl": "pkg:deb/debian/snakeyaml@1.17-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.17-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050760?format=api", "purl": "pkg:deb/debian/snakeyaml@1.23-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.23-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/144419?format=api", "purl": "pkg:maven/be.cylab/snakeyaml@1.25.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/be.cylab/snakeyaml@1.25.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/144420?format=api", "purl": "pkg:maven/com.alipay.sofa.acts/acts-common-util@1.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.alipay.sofa.acts/acts-common-util@1.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/144421?format=api", "purl": "pkg:maven/io.prometheus.jmx/jmx_prometheus_httpserver@0.17.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/io.prometheus.jmx/jmx_prometheus_httpserver@0.17.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/326846?format=api", "purl": "pkg:maven/io.prometheus.jmx/jmx_prometheus_httpserver_java6@0.17.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/io.prometheus.jmx/jmx_prometheus_httpserver_java6@0.17.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/326847?format=api", "purl": "pkg:maven/io.prometheus.jmx/jmx_prometheus_httpserver_java6@0.17.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/io.prometheus.jmx/jmx_prometheus_httpserver_java6@0.17.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/326848?format=api", "purl": "pkg:maven/io.prometheus.jmx/jmx_prometheus_httpserver_java6@0.17.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/io.prometheus.jmx/jmx_prometheus_httpserver_java6@0.17.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/144422?format=api", "purl": "pkg:maven/io.prometheus.jmx/jmx_prometheus_httpserver_java6@0.18.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/io.prometheus.jmx/jmx_prometheus_httpserver_java6@0.18.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/326870?format=api", "purl": "pkg:maven/org.testifyproject.external/external-snakeyaml@0.9.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.testifyproject.external/external-snakeyaml@0.9.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/326871?format=api", "purl": "pkg:maven/org.testifyproject.external/external-snakeyaml@0.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.testifyproject.external/external-snakeyaml@0.9.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/326872?format=api", "purl": "pkg:maven/org.testifyproject.external/external-snakeyaml@0.9.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.testifyproject.external/external-snakeyaml@0.9.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/326873?format=api", "purl": "pkg:maven/org.testifyproject.external/external-snakeyaml@0.9.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.testifyproject.external/external-snakeyaml@0.9.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/326874?format=api", "purl": "pkg:maven/org.testifyproject.external/external-snakeyaml@0.9.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.testifyproject.external/external-snakeyaml@0.9.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/326875?format=api", "purl": "pkg:maven/org.testifyproject.external/external-snakeyaml@1.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.testifyproject.external/external-snakeyaml@1.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/326876?format=api", "purl": "pkg:maven/org.testifyproject.external/external-snakeyaml@1.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.testifyproject.external/external-snakeyaml@1.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/326877?format=api", "purl": "pkg:maven/org.testifyproject.external/external-snakeyaml@1.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.testifyproject.external/external-snakeyaml@1.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/326878?format=api", "purl": "pkg:maven/org.testifyproject.external/external-snakeyaml@1.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.testifyproject.external/external-snakeyaml@1.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/326879?format=api", "purl": "pkg:maven/org.testifyproject.external/external-snakeyaml@1.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.testifyproject.external/external-snakeyaml@1.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/144418?format=api", "purl": "pkg:maven/org.testifyproject.external/external-snakeyaml@1.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.testifyproject.external/external-snakeyaml@1.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/197931?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/197932?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/197933?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/197934?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/197935?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/197936?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/197937?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/197938?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/197939?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/197940?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/197941?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/197942?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/197943?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/197944?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/197945?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/197946?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/197947?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/197948?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/197949?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/197950?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/197951?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.24" }, { "url": "http://public2.vulnerablecode.io/api/packages/197952?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-e8hu-czv4-yyc5" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/76440?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.26", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.26" }, { "url": "http://public2.vulnerablecode.io/api/packages/326657?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.27", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.27" }, { "url": "http://public2.vulnerablecode.io/api/packages/326658?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/326659?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/326660?format=api", "purl": "pkg:maven/org.yaml/snakeyaml@1.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqsn-ygsg-yfdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/326867?format=api", "purl": "pkg:maven/pl.droidsonroids.yaml/snakeyaml@1.18-android", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/pl.droidsonroids.yaml/snakeyaml@1.18-android" }, { "url": "http://public2.vulnerablecode.io/api/packages/326868?format=api", "purl": "pkg:maven/pl.droidsonroids.yaml/snakeyaml@1.18.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/pl.droidsonroids.yaml/snakeyaml@1.18.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/144423?format=api", "purl": "pkg:maven/pl.droidsonroids.yaml/snakeyaml@1.18.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6354-p39b-zbhp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/pl.droidsonroids.yaml/snakeyaml@1.18.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/96695?format=api", "purl": "pkg:rpm/redhat/candlepin@4.2.13-1?arch=el8sat", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2cup-9gdn-yyhk" }, { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-9h46-72hw-bkcr" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-fb8u-g65k-hffs" }, { "vulnerability": "VCID-j986-mtma-b3bw" }, { "vulnerability": "VCID-mbst-3bec-ykcq" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-qub7-qp14-uqcg" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-v2pq-1qhm-4qb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/candlepin@4.2.13-1%3Farch=el8sat" }, { "url": "http://public2.vulnerablecode.io/api/packages/96973?format=api", "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1?arch=el7sso", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2xyb-g3n4-n3ca" }, { "vulnerability": "VCID-3s9f-prpy-hbcx" }, { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-4v1f-kt5y-w7d1" }, { "vulnerability": "VCID-5618-53yg-8qh4" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-7j7q-m1zp-zfac" }, { "vulnerability": "VCID-9h46-72hw-bkcr" }, { "vulnerability": "VCID-cvxp-ctj9-guej" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-dxj3-8sk5-mfdy" }, { "vulnerability": "VCID-ebn8-cjqs-k3ad" }, { "vulnerability": "VCID-gp47-t3vm-57an" }, { "vulnerability": "VCID-hbwg-ebvx-k7e1" }, { "vulnerability": "VCID-kexn-gjxj-uudm" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-myp4-24sf-9yfv" }, { "vulnerability": "VCID-netd-rr9e-wbg5" }, { "vulnerability": "VCID-ptd4-8f7f-hyg6" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqx4-euc2-myew" }, { "vulnerability": "VCID-turp-dju7-c7fx" }, { "vulnerability": "VCID-v2pq-1qhm-4qb9" }, { "vulnerability": "VCID-vfsr-kypp-wbea" }, { "vulnerability": "VCID-wp9q-eurd-43dx" }, { "vulnerability": "VCID-xy58-u3se-wfdb" }, { "vulnerability": "VCID-xzs8-rbhd-mkbp" }, { "vulnerability": "VCID-y1np-kma2-ayfn" }, { "vulnerability": "VCID-y3ey-aab7-q3fk" }, { "vulnerability": "VCID-y8up-mkx2-abcn" }, { "vulnerability": "VCID-y9aa-2a31-ufa7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1%3Farch=el7sso" }, { "url": "http://public2.vulnerablecode.io/api/packages/96972?format=api", "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1?arch=el9sso", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2xyb-g3n4-n3ca" }, { "vulnerability": "VCID-3s9f-prpy-hbcx" }, { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-4v1f-kt5y-w7d1" }, { "vulnerability": "VCID-5618-53yg-8qh4" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-7j7q-m1zp-zfac" }, { "vulnerability": "VCID-9h46-72hw-bkcr" }, { "vulnerability": "VCID-cvxp-ctj9-guej" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-dxj3-8sk5-mfdy" }, { "vulnerability": "VCID-ebn8-cjqs-k3ad" }, { "vulnerability": "VCID-gp47-t3vm-57an" }, { "vulnerability": "VCID-hbwg-ebvx-k7e1" }, { "vulnerability": "VCID-kexn-gjxj-uudm" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-myp4-24sf-9yfv" }, { "vulnerability": "VCID-netd-rr9e-wbg5" }, { "vulnerability": "VCID-ptd4-8f7f-hyg6" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqx4-euc2-myew" }, { "vulnerability": "VCID-turp-dju7-c7fx" }, { "vulnerability": "VCID-v2pq-1qhm-4qb9" }, { "vulnerability": "VCID-vfsr-kypp-wbea" }, { "vulnerability": "VCID-wp9q-eurd-43dx" }, { "vulnerability": "VCID-xy58-u3se-wfdb" }, { "vulnerability": "VCID-xzs8-rbhd-mkbp" }, { "vulnerability": "VCID-y1np-kma2-ayfn" }, { "vulnerability": "VCID-y3ey-aab7-q3fk" }, { "vulnerability": "VCID-y8up-mkx2-abcn" }, { "vulnerability": "VCID-y9aa-2a31-ufa7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1%3Farch=el9sso" }, { "url": "http://public2.vulnerablecode.io/api/packages/96971?format=api", "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1?arch=el8sso", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2xyb-g3n4-n3ca" }, { "vulnerability": "VCID-3s9f-prpy-hbcx" }, { "vulnerability": "VCID-4nu3-fknt-puej" }, { "vulnerability": "VCID-4v1f-kt5y-w7d1" }, { "vulnerability": "VCID-5618-53yg-8qh4" }, { "vulnerability": "VCID-6354-p39b-zbhp" }, { "vulnerability": "VCID-7j7q-m1zp-zfac" }, { "vulnerability": "VCID-9h46-72hw-bkcr" }, { "vulnerability": "VCID-cvxp-ctj9-guej" }, { "vulnerability": "VCID-dmkc-42vj-gbhc" }, { "vulnerability": "VCID-dxj3-8sk5-mfdy" }, { "vulnerability": "VCID-ebn8-cjqs-k3ad" }, { "vulnerability": "VCID-gp47-t3vm-57an" }, { "vulnerability": "VCID-hbwg-ebvx-k7e1" }, { "vulnerability": "VCID-kexn-gjxj-uudm" }, { "vulnerability": "VCID-mm3e-4pej-byed" }, { "vulnerability": "VCID-myp4-24sf-9yfv" }, { "vulnerability": "VCID-netd-rr9e-wbg5" }, { "vulnerability": "VCID-ptd4-8f7f-hyg6" }, { "vulnerability": "VCID-qxfs-sq38-jfad" }, { "vulnerability": "VCID-sqx4-euc2-myew" }, { "vulnerability": "VCID-turp-dju7-c7fx" }, { "vulnerability": "VCID-v2pq-1qhm-4qb9" }, { "vulnerability": "VCID-vfsr-kypp-wbea" }, { "vulnerability": "VCID-wp9q-eurd-43dx" }, { "vulnerability": "VCID-xy58-u3se-wfdb" }, { "vulnerability": "VCID-xzs8-rbhd-mkbp" }, { "vulnerability": "VCID-y1np-kma2-ayfn" }, { "vulnerability": "VCID-y3ey-aab7-q3fk" }, { "vulnerability": "VCID-y8up-mkx2-abcn" }, { "vulnerability": "VCID-y9aa-2a31-ufa7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1%3Farch=el8sso" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38749.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38749.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-38749", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00533", "scoring_system": "epss", "scoring_elements": "0.67428", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00533", "scoring_system": "epss", "scoring_elements": "0.67415", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00533", "scoring_system": "epss", "scoring_elements": "0.6738", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00533", "scoring_system": "epss", "scoring_elements": "0.67414", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00533", "scoring_system": "epss", "scoring_elements": "0.67406", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00533", "scoring_system": "epss", "scoring_elements": "0.67392", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00533", "scoring_system": "epss", "scoring_elements": "0.67364", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00533", "scoring_system": "epss", "scoring_elements": "0.67341", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00533", "scoring_system": "epss", "scoring_elements": "0.67426", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-38749" }, { "reference_url": "https://arxiv.org/pdf/2306.05534.pdf", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://arxiv.org/pdf/2306.05534.pdf" }, { "reference_url": "https://bitbucket.org/snakeyaml/snakeyaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bitbucket.org/snakeyaml/snakeyaml" }, { "reference_url": "https://bitbucket.org/snakeyaml/snakeyaml/issues/525/got-stackoverflowerror-for-many-open", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues/525/got-stackoverflowerror-for-many-open" }, { "reference_url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47024", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47024" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38749", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38749" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38749", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38749" }, { "reference_url": "https://security.gentoo.org/glsa/202305-28", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202305-28" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240315-0010", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20240315-0010" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129706", "reference_id": "2129706", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129706" }, { "reference_url": "https://github.com/advisories/GHSA-c4r9-r8fh-9vj2", "reference_id": "GHSA-c4r9-r8fh-9vj2", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-c4r9-r8fh-9vj2" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:6757", "reference_id": "RHSA-2022:6757", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:6757" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8524", "reference_id": "RHSA-2022:8524", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8524" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8652", "reference_id": "RHSA-2022:8652", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8652" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8876", "reference_id": "RHSA-2022:8876", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8876" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2097", "reference_id": "RHSA-2023:2097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2100", "reference_id": "RHSA-2023:2100", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2100" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3641", "reference_id": "RHSA-2023:3641", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3641" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7697", "reference_id": "RHSA-2023:7697", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7697" }, { "reference_url": "https://usn.ubuntu.com/5944-1/", "reference_id": "USN-5944-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5944-1/" } ], "weaknesses": [ { "cwe_id": 121, "name": "Stack-based Buffer Overflow", "description": "A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function)." }, { "cwe_id": 787, "name": "Out-of-bounds Write", "description": "The product writes data past the end, or before the beginning, of the intended buffer." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "4.0 - 7.5", "exploitability": "0.5", "weighted_severity": "6.2", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6354-p39b-zbhp" }