{"url":"http://public2.vulnerablecode.io/api/packages/102622?format=json","purl":"pkg:deb/debian/ruby-json-jwt@1.17.0-1?distro=trixie","type":"deb","namespace":"debian","name":"ruby-json-jwt","version":"1.17.0-1","qualifiers":{"distro":"trixie"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"1.9.4-1","latest_non_vulnerable_version":"1.17.0-1","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/204253?format=json","vulnerability_id":"VCID-4zw4-nktv-afae","summary":"JSON-jwt Gem lacked element count during splitting of JWE string","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18848","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18848"},{"reference_url":"https://github.com/nov/json-jwt/commit/ada16e772906efdd035e3df49cb2ae372f0f948a","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/nov/json-jwt/commit/ada16e772906efdd035e3df49cb2ae372f0f948a"},{"reference_url":"https://github.com/nov/json-jwt/compare/v1.10.2...v1.11.0","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/nov/json-jwt/compare/v1.10.2...v1.11.0"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/10/msg00001.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2020/10/msg00001.html"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=944850","reference_id":"944850","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=944850"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18848","reference_id":"CVE-2019-18848","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18848"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/json-jwt/CVE-2019-18848.yml","reference_id":"CVE-2019-18848.YML","reference_type":"","scores":[],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/json-jwt/CVE-2019-18848.yml"},{"reference_url":"https://github.com/advisories/GHSA-cff7-6h4q-q5pj","reference_id":"GHSA-cff7-6h4q-q5pj","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-cff7-6h4q-q5pj"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/102621?format=json","purl":"pkg:deb/debian/ruby-json-jwt@1.11.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-json-jwt@1.11.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102619?format=json","purl":"pkg:deb/debian/ruby-json-jwt@1.14.0-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-json-jwt@1.14.0-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102623?format=json","purl":"pkg:deb/debian/ruby-json-jwt@1.16.7-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-json-jwt@1.16.7-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102622?format=json","purl":"pkg:deb/debian/ruby-json-jwt@1.17.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-json-jwt@1.17.0-1%3Fdistro=trixie"}],"aliases":["CVE-2019-18848","GHSA-cff7-6h4q-q5pj"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4zw4-nktv-afae"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174509?format=json","vulnerability_id":"VCID-fjt3-bw5m-g3gx","summary":"security update","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000539","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000539"},{"reference_url":"https://github.com/nov/json-jwt/commit/a3b2147f0f6d9aca653e7a30e453d3a92b33413f","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/nov/json-jwt/commit/a3b2147f0f6d9aca653e7a30e453d3a92b33413f"},{"reference_url":"https://github.com/nov/json-jwt/pull/62","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/nov/json-jwt/pull/62"},{"reference_url":"https://www.debian.org/security/2018/dsa-4283","reference_id":"","reference_type":"","scores":[],"url":"https://www.debian.org/security/2018/dsa-4283"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=902721","reference_id":"902721","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=902721"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000539","reference_id":"CVE-2018-1000539","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000539"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/json-jwt/CVE-2018-1000539.yml","reference_id":"CVE-2018-1000539.YML","reference_type":"","scores":[],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/json-jwt/CVE-2018-1000539.yml"},{"reference_url":"https://github.com/advisories/GHSA-mj4x-wcxf-hm8x","reference_id":"GHSA-mj4x-wcxf-hm8x","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mj4x-wcxf-hm8x"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/102620?format=json","purl":"pkg:deb/debian/ruby-json-jwt@1.9.4-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-json-jwt@1.9.4-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102621?format=json","purl":"pkg:deb/debian/ruby-json-jwt@1.11.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-json-jwt@1.11.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102619?format=json","purl":"pkg:deb/debian/ruby-json-jwt@1.14.0-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-json-jwt@1.14.0-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102623?format=json","purl":"pkg:deb/debian/ruby-json-jwt@1.16.7-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-json-jwt@1.16.7-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102622?format=json","purl":"pkg:deb/debian/ruby-json-jwt@1.17.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-json-jwt@1.17.0-1%3Fdistro=trixie"}],"aliases":["CVE-2018-1000539","GHSA-mj4x-wcxf-hm8x"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fjt3-bw5m-g3gx"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-json-jwt@1.17.0-1%3Fdistro=trixie"}