Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/99564?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/99564?format=api", "vulnerability_id": "VCID-xdgc-mntb-zkgu", "summary": "While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when configured to verify the peer certificate* while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.", "aliases": [ { "alias": "CVE-2019-0223" }, { "alias": "GHSA-5h6x-m52p-23ph" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/617326?format=api", "purl": "pkg:deb/debian/qpid-proton@0.22.0-3", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qpid-proton@0.22.0-3" }, { "url": "http://public2.vulnerablecode.io/api/packages/126095?format=api", "purl": "pkg:deb/debian/qpid-proton@0.22.0-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qpid-proton@0.22.0-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/126092?format=api", "purl": "pkg:deb/debian/qpid-proton@0.22.0-5.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qpid-proton@0.22.0-5.1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/126090?format=api", "purl": "pkg:deb/debian/qpid-proton@0.37.0-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qpid-proton@0.37.0-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/126094?format=api", "purl": "pkg:deb/debian/qpid-proton@0.37.0-6?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qpid-proton@0.37.0-6%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/126093?format=api", "purl": "pkg:deb/debian/qpid-proton@0.37.0-8?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qpid-proton@0.37.0-8%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/151720?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.27.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.27.1" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/617324?format=api", "purl": "pkg:deb/debian/qpid-proton@0.14.0-4~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qpid-proton@0.14.0-4~bpo8%252B1" }, { "url": "http://public2.vulnerablecode.io/api/packages/617325?format=api", "purl": "pkg:deb/debian/qpid-proton@0.14.0-5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qpid-proton@0.14.0-5" }, { "url": "http://public2.vulnerablecode.io/api/packages/617323?format=api", "purl": "pkg:deb/debian/qpid-proton@0.7-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/qpid-proton@0.7-2" }, { "url": "http://public2.vulnerablecode.io/api/packages/182140?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2a6m-asyd-8uax" }, { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/182141?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2a6m-asyd-8uax" }, { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.9.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/182142?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2a6m-asyd-8uax" }, { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/182143?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.11.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2a6m-asyd-8uax" }, { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.11.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182144?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.11.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2a6m-asyd-8uax" }, { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/182145?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2a6m-asyd-8uax" }, { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.12.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/56593?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.12.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.12.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/182146?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.12.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.12.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/182147?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.13.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.13.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182148?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.13.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.13.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/182149?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.14.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.14.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182150?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.15.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.15.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182151?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.16.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.16.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182152?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.17.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.17.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182153?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.18.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.18.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182154?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.19.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.19.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182155?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.20.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.20.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182156?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.21.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.21.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182157?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.22.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.22.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182158?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.23.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.23.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182159?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.24.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.24.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182160?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.25.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.25.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182161?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.26.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.26.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/182162?format=api", "purl": "pkg:maven/org.apache.qpid/proton-j@0.27.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-p8k1-664d-yfg4" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.27.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/145021?format=api", "purl": "pkg:rpm/redhat/ansible-runner@1.3.4-2?arch=el8ar", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ansible-runner@1.3.4-2%3Farch=el8ar" }, { "url": "http://public2.vulnerablecode.io/api/packages/144992?format=api", "purl": "pkg:rpm/redhat/ansible-tower@3.5.2-1?arch=el8at", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ansible-tower@3.5.2-1%3Farch=el8at" }, { "url": "http://public2.vulnerablecode.io/api/packages/144981?format=api", "purl": "pkg:rpm/redhat/cfme@5.11.0.28-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme@5.11.0.28-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144973?format=api", "purl": "pkg:rpm/redhat/cfme-amazon-smartstate@5.11.0.28-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme-amazon-smartstate@5.11.0.28-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144948?format=api", "purl": "pkg:rpm/redhat/cfme-appliance@5.11.0.28-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme-appliance@5.11.0.28-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144954?format=api", "purl": "pkg:rpm/redhat/cfme-gemset@5.11.0.28-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme-gemset@5.11.0.28-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144989?format=api", "purl": "pkg:rpm/redhat/jsoncpp@1.7.7-1?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jsoncpp@1.7.7-1%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/144945?format=api", "purl": "pkg:rpm/redhat/ovirt-ansible-cluster-upgrade@1.1.13-1?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-ansible-cluster-upgrade@1.1.13-1%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/144968?format=api", "purl": "pkg:rpm/redhat/ovirt-ansible-disaster-recovery@1.2.0-1?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-ansible-disaster-recovery@1.2.0-1%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/145016?format=api", "purl": "pkg:rpm/redhat/ovirt-ansible-engine-setup@1.1.9-1?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-ansible-engine-setup@1.1.9-1%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/144953?format=api", "purl": "pkg:rpm/redhat/ovirt-ansible-hosted-engine-setup@1.0.26-1?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-ansible-hosted-engine-setup@1.0.26-1%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/145012?format=api", "purl": "pkg:rpm/redhat/ovirt-ansible-image-template@1.1.11-1?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-ansible-image-template@1.1.11-1%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/144987?format=api", "purl": "pkg:rpm/redhat/ovirt-ansible-infra@1.1.12-1?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-ansible-infra@1.1.12-1%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/145009?format=api", "purl": "pkg:rpm/redhat/ovirt-ansible-manageiq@1.1.14-1?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-ansible-manageiq@1.1.14-1%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/145024?format=api", "purl": "pkg:rpm/redhat/ovirt-ansible-repositories@1.1.5-1?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-ansible-repositories@1.1.5-1%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/144956?format=api", "purl": "pkg:rpm/redhat/ovirt-ansible-roles@1.1.7-2?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-ansible-roles@1.1.7-2%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/144974?format=api", "purl": "pkg:rpm/redhat/ovirt-ansible-shutdown-env@1.0.3-1?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-ansible-shutdown-env@1.0.3-1%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/145013?format=api", "purl": "pkg:rpm/redhat/ovirt-ansible-vm-infra@1.1.19-1?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-ansible-vm-infra@1.1.19-1%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/144995?format=api", "purl": "pkg:rpm/redhat/prince@12.4-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/prince@12.4-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144999?format=api", "purl": "pkg:rpm/redhat/python3-ovirt-engine-sdk4@4.3.2-1?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python3-ovirt-engine-sdk4@4.3.2-1%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/144967?format=api", "purl": "pkg:rpm/redhat/python-bambou@3.0.1-2?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-bambou@3.0.1-2%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144997?format=api", "purl": "pkg:rpm/redhat/python-colorama@0.4.1-1?arch=el8ost", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-colorama@0.4.1-1%3Farch=el8ost" }, { "url": "http://public2.vulnerablecode.io/api/packages/145001?format=api", "purl": "pkg:rpm/redhat/python-daemon@2.1.2-9?arch=el8ar", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-daemon@2.1.2-9%3Farch=el8ar" }, { "url": "http://public2.vulnerablecode.io/api/packages/144982?format=api", "purl": "pkg:rpm/redhat/python-funcsigs@1.0.2-3?arch=el8ost", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-funcsigs@1.0.2-3%3Farch=el8ost" }, { "url": "http://public2.vulnerablecode.io/api/packages/145020?format=api", "purl": "pkg:rpm/redhat/python-future@0.16.0-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-future@0.16.0-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/131877?format=api", "purl": "pkg:rpm/redhat/python-lockfile@1:0.11.0-8?arch=el8ar", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hywv-3kva-x3hq" }, { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-lockfile@1:0.11.0-8%3Farch=el8ar" }, { "url": "http://public2.vulnerablecode.io/api/packages/144979?format=api", "purl": "pkg:rpm/redhat/python-mock@2.0.0-11?arch=el8ost", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-mock@2.0.0-11%3Farch=el8ost" }, { "url": "http://public2.vulnerablecode.io/api/packages/145018?format=api", "purl": "pkg:rpm/redhat/python-pbr@5.1.2-2?arch=el8ost", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-pbr@5.1.2-2%3Farch=el8ost" }, { "url": "http://public2.vulnerablecode.io/api/packages/131745?format=api", "purl": "pkg:rpm/redhat/python-pexpect@4.6-2?arch=el8ar", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hywv-3kva-x3hq" }, { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-pexpect@4.6-2%3Farch=el8ar" }, { "url": "http://public2.vulnerablecode.io/api/packages/144970?format=api", "purl": "pkg:rpm/redhat/python-psutil@5.4.3-5?arch=el8ar", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-psutil@5.4.3-5%3Farch=el8ar" }, { "url": "http://public2.vulnerablecode.io/api/packages/144980?format=api", "purl": "pkg:rpm/redhat/python-pylxca@2.1.1-2?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-pylxca@2.1.1-2%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144949?format=api", "purl": "pkg:rpm/redhat/python-requests-toolbelt@0.8.0-2?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-requests-toolbelt@0.8.0-2%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144978?format=api", "purl": "pkg:rpm/redhat/python-tabulate@0.8.2-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-tabulate@0.8.2-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144998?format=api", "purl": "pkg:rpm/redhat/python-vspk@5.3.2-2?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-vspk@5.3.2-2%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144961?format=api", "purl": "pkg:rpm/redhat/qpid-proton@0.9-22?arch=el5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/qpid-proton@0.9-22%3Farch=el5" }, { "url": "http://public2.vulnerablecode.io/api/packages/145002?format=api", "purl": "pkg:rpm/redhat/qpid-proton@0.16.0-14?arch=el6sat", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/qpid-proton@0.16.0-14%3Farch=el6sat" }, { "url": "http://public2.vulnerablecode.io/api/packages/144990?format=api", "purl": "pkg:rpm/redhat/qpid-proton@0.16.0-14?arch=el7sat", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/qpid-proton@0.16.0-14%3Farch=el7sat" }, { "url": "http://public2.vulnerablecode.io/api/packages/144958?format=api", "purl": "pkg:rpm/redhat/qpid-proton@0.27.0-3?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/qpid-proton@0.27.0-3%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/144960?format=api", "purl": "pkg:rpm/redhat/qpid-proton@0.27.0-3?arch=el6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/qpid-proton@0.27.0-3%3Farch=el6" }, { "url": "http://public2.vulnerablecode.io/api/packages/144994?format=api", "purl": "pkg:rpm/redhat/qpid-proton@0.28.0-1?arch=el8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/qpid-proton@0.28.0-1%3Farch=el8" }, { "url": "http://public2.vulnerablecode.io/api/packages/143956?format=api", "purl": "pkg:rpm/redhat/qpid-proton@0.28.0-1?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4nxt-wsu3-2yat" }, { "vulnerability": "VCID-6zct-y89u-2bag" }, { "vulnerability": "VCID-bb29-8jkm-9bab" }, { "vulnerability": "VCID-cjze-s3ny-bbfx" }, { "vulnerability": "VCID-ejgc-vj4y-u3bt" }, { "vulnerability": "VCID-fydd-euat-suha" }, { "vulnerability": "VCID-jfmc-7tky-mqdw" }, { "vulnerability": "VCID-jmx5-8993-kqeh" }, { "vulnerability": "VCID-js4m-yqqf-4ubd" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/qpid-proton@0.28.0-1%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/144971?format=api", "purl": "pkg:rpm/redhat/repmgr10@4.0.6-3?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/repmgr10@4.0.6-3%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/145006?format=api", "purl": "pkg:rpm/redhat/rubygem-bcrypt@3.1.13-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-bcrypt@3.1.13-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144951?format=api", "purl": "pkg:rpm/redhat/rubygem-byebug@11.0.1-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-byebug@11.0.1-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144984?format=api", "purl": "pkg:rpm/redhat/rubygem-escape_utils@1.2.1-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-escape_utils@1.2.1-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144991?format=api", "purl": "pkg:rpm/redhat/rubygem-ffi@1.9.25-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-ffi@1.9.25-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144996?format=api", "purl": "pkg:rpm/redhat/rubygem-hamlit@2.8.10-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-hamlit@2.8.10-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144993?format=api", "purl": "pkg:rpm/redhat/rubygem-http_parser.rb@0.6.0-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-http_parser.rb@0.6.0-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144946?format=api", "purl": "pkg:rpm/redhat/rubygem-linux_block_device@0.2.1-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-linux_block_device@0.2.1-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144986?format=api", "purl": "pkg:rpm/redhat/rubygem-memory_buffer@0.1.0-2?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-memory_buffer@0.1.0-2%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/145015?format=api", "purl": "pkg:rpm/redhat/rubygem-nio4r@2.4.0-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-nio4r@2.4.0-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144966?format=api", "purl": "pkg:rpm/redhat/rubygem-nokogiri@1.8.5-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-nokogiri@1.8.5-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/145026?format=api", "purl": "pkg:rpm/redhat/rubygem-ovirt-engine-sdk4@4.3.0-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-ovirt-engine-sdk4@4.3.0-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/145019?format=api", "purl": "pkg:rpm/redhat/rubygem-puma@3.7.1-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-puma@3.7.1-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/145011?format=api", "purl": "pkg:rpm/redhat/rubygem-qpid_proton@0.26.0-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-qpid_proton@0.26.0-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/145027?format=api", "purl": "pkg:rpm/redhat/rubygem-rugged@0.28.2-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-rugged@0.28.2-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144963?format=api", "purl": "pkg:rpm/redhat/rubygem-sassc@2.0.1-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-sassc@2.0.1-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144964?format=api", "purl": "pkg:rpm/redhat/rubygem-sqlite3@1.3.13-2?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-sqlite3@1.3.13-2%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/145004?format=api", "purl": "pkg:rpm/redhat/rubygem-surro-gate@1.0.5-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-surro-gate@1.0.5-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144972?format=api", "purl": "pkg:rpm/redhat/rubygem-unf_ext@0.0.7.6-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-unf_ext@0.0.7.6-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144988?format=api", "purl": "pkg:rpm/redhat/rubygem-websocket-driver@0.6.5-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-websocket-driver@0.6.5-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/144976?format=api", "purl": "pkg:rpm/redhat/smem@1.4-1?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/smem@1.4-1%3Farch=el8cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/145023?format=api", "purl": "pkg:rpm/redhat/v2v-conversion-host@1.14.2-1?arch=el8ev", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/v2v-conversion-host@1.14.2-1%3Farch=el8ev" }, { "url": "http://public2.vulnerablecode.io/api/packages/145007?format=api", "purl": "pkg:rpm/redhat/wmi@1.3.14-8?arch=el8cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-r4qe-549h-nfh1" }, { "vulnerability": "VCID-xdgc-mntb-zkgu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/wmi@1.3.14-8%3Farch=el8cf" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0223.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0223.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-0223", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00399", "scoring_system": "epss", "scoring_elements": "0.61039", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00399", "scoring_system": "epss", "scoring_elements": "0.6099", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-0223" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0223", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0223" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://issues.apache.org/jira/browse/PROTON-2014?page=com.atlassian.jira.plugin.system.issuetabpanels%3Aall-tabpanel", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://issues.apache.org/jira/browse/PROTON-2014?page=com.atlassian.jira.plugin.system.issuetabpanels%3Aall-tabpanel" }, { "reference_url": "https://lists.apache.org/thread.html/008ee5e78e5a090e1fcc5f6617f425e4e51d59f03d3eda2dd006df9f@%3Cusers.qpid.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/008ee5e78e5a090e1fcc5f6617f425e4e51d59f03d3eda2dd006df9f@%3Cusers.qpid.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/3adb2f020f705b4fd453982992a68cd10f9d5ac728b699efdb73c1f5@%3Cdev.qpid.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/3adb2f020f705b4fd453982992a68cd10f9d5ac728b699efdb73c1f5@%3Cdev.qpid.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/49c83f0acce5ceaeffca51714ec2ba0f0199bcb8f99167181bba441b@%3Cdev.qpid.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/49c83f0acce5ceaeffca51714ec2ba0f0199bcb8f99167181bba441b@%3Cdev.qpid.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d@%3Ccommits.qpid.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d@%3Ccommits.qpid.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/d9c9a882a292e2defaed1f954528c916fb64497ce57db652727e39b0@%3Cannounce.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/d9c9a882a292e2defaed1f954528c916fb64497ce57db652727e39b0@%3Cannounce.apache.org%3E" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0223", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0223" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2019/04/23/4", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2019/04/23/4" }, { "reference_url": "http://www.securityfocus.com/bid/108044", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/108044" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702439", "reference_id": "1702439", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702439" }, { "reference_url": "https://github.com/advisories/GHSA-5h6x-m52p-23ph", "reference_id": "GHSA-5h6x-m52p-23ph", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-5h6x-m52p-23ph" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0886", "reference_id": "RHSA-2019:0886", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0886" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:1398", "reference_id": "RHSA-2019:1398", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:1398" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:1399", "reference_id": "RHSA-2019:1399", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:1399" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:1400", "reference_id": "RHSA-2019:1400", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:1400" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2777", "reference_id": "RHSA-2019:2777", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:2777" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2778", "reference_id": "RHSA-2019:2778", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:2778" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2779", "reference_id": "RHSA-2019:2779", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:2779" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2780", "reference_id": "RHSA-2019:2780", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:2780" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2781", "reference_id": "RHSA-2019:2781", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:2781" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2782", "reference_id": "RHSA-2019:2782", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:2782" } ], "weaknesses": [ { "cwe_id": 325, "name": "Missing Cryptographic Step", "description": "The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm." }, { "cwe_id": 295, "name": "Improper Certificate Validation", "description": "The product does not validate, or incorrectly validates, a certificate." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xdgc-mntb-zkgu" }