{"url":"http://public2.vulnerablecode.io/api/packages/1035583?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5","type":"deb","namespace":"debian","name":"libxml2","version":"2.9.1+dfsg1-5","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"2.15.1+dfsg-2","latest_non_vulnerable_version":"2.15.1+dfsg-2","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/69445?format=json","vulnerability_id":"VCID-27jd-t23h-73f4","summary":"libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-6021.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-6021.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-6021","reference_id":"","reference_type":"","scores":[{"value":"0.00759","scoring_system":"epss","scoring_elements":"0.73272","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00759","scoring_system":"epss","scoring_elements":"0.73267","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00759","scoring_system":"epss","scoring_elements":"0.73295","published_at":"2026-04-04T12:55:00Z"},{"value":"0.02116","scoring_system":"epss","scoring_elements":"0.84123","published_at":"2026-04-13T12:55:00Z"},{"value":"0.02116","scoring_system":"epss","scoring_elements":"0.84109","published_at":"2026-04-08T12:55:00Z"},{"value":"0.02116","scoring_system":"epss","scoring_elements":"0.84115","published_at":"2026-04-09T12:55:00Z"},{"value":"0.02116","scoring_system":"epss","scoring_elements":"0.84133","published_at":"2026-04-11T12:55:00Z"},{"value":"0.02116","scoring_system":"epss","scoring_elements":"0.84127","published_at":"2026-04-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-6021"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6021","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6021"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1107720","reference_id":"1107720","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1107720"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372406","reference_id":"2372406","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372406"},{"reference_url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/926","reference_id":"926","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/926"},{"reference_url":"https://security.archlinux.org/AVG-2899","reference_id":"AVG-2899","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2899"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:discovery:2::el9","reference_id":"cpe:/a:redhat:discovery:2::el9","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:discovery:2::el9"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:8::appstream","reference_id":"cpe:/a:redhat:enterprise_linux:8::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:8::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream","reference_id":"cpe:/a:redhat:enterprise_linux:9::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:insights_proxy:1.5::el9","reference_id":"cpe:/a:redhat:insights_proxy:1.5::el9","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:insights_proxy:1.5::el9"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_core_services:1","reference_id":"cpe:/a:redhat:jboss_core_services:1","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_core_services:1"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.12::el8","reference_id":"cpe:/a:redhat:openshift:4.12::el8","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.12::el8"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.13::el9","reference_id":"cpe:/a:redhat:openshift:4.13::el9","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.13::el9"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.14::el8","reference_id":"cpe:/a:redhat:openshift:4.14::el8","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.14::el8"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.14::el9","reference_id":"cpe:/a:redhat:openshift:4.14::el9","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.14::el9"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.15::el9","reference_id":"cpe:/a:redhat:openshift:4.15::el9","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.15::el9"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.16::el9","reference_id":"cpe:/a:redhat:openshift:4.16::el9","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.16::el9"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.17::el9","reference_id":"cpe:/a:redhat:openshift:4.17::el9","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.17::el9"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.18::el9","reference_id":"cpe:/a:redhat:openshift:4.18::el9","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.18::el9"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.19::el9","reference_id":"cpe:/a:redhat:openshift:4.19::el9","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.19::el9"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_aus:8.2::appstream","reference_id":"cpe:/a:redhat:rhel_aus:8.2::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_aus:8.2::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_aus:8.4::appstream","reference_id":"cpe:/a:redhat:rhel_aus:8.4::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_aus:8.4::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_aus:8.6::appstream","reference_id":"cpe:/a:redhat:rhel_aus:8.6::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_aus:8.6::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:8.6::appstream","reference_id":"cpe:/a:redhat:rhel_e4s:8.6::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:8.6::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:8.8::appstream","reference_id":"cpe:/a:redhat:rhel_e4s:8.8::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:8.8::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.0::appstream","reference_id":"cpe:/a:redhat:rhel_e4s:9.0::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.0::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.2::appstream","reference_id":"cpe:/a:redhat:rhel_e4s:9.2::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.2::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus:9.4::appstream","reference_id":"cpe:/a:redhat:rhel_eus:9.4::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus:9.4::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","reference_id":"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_tus:8.6::appstream","reference_id":"cpe:/a:redhat:rhel_tus:8.6::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_tus:8.6::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_tus:8.8::appstream","reference_id":"cpe:/a:redhat:rhel_tus:8.8::appstream","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_tus:8.8::appstream"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0","reference_id":"cpe:/o:redhat:enterprise_linux:10.0","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6","reference_id":"cpe:/o:redhat:enterprise_linux:6","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos","reference_id":"cpe:/o:redhat:enterprise_linux:8::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos","reference_id":"cpe:/o:redhat:enterprise_linux:9::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.2::baseos","reference_id":"cpe:/o:redhat:rhel_aus:8.2::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.2::baseos"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.4::baseos","reference_id":"cpe:/o:redhat:rhel_aus:8.4::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.4::baseos"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.6::baseos","reference_id":"cpe:/o:redhat:rhel_aus:8.6::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.6::baseos"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.6::baseos","reference_id":"cpe:/o:redhat:rhel_e4s:8.6::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.6::baseos"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.8::baseos","reference_id":"cpe:/o:redhat:rhel_e4s:8.8::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.8::baseos"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.0::baseos","reference_id":"cpe:/o:redhat:rhel_e4s:9.0::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.0::baseos"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.2::baseos","reference_id":"cpe:/o:redhat:rhel_e4s:9.2::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.2::baseos"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_els:7","reference_id":"cpe:/o:redhat:rhel_els:7","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_els:7"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:9.4::baseos","reference_id":"cpe:/o:redhat:rhel_eus:9.4::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:9.4::baseos"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus_long_life:8.4::baseos","reference_id":"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.6::baseos","reference_id":"cpe:/o:redhat:rhel_tus:8.6::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.6::baseos"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.8::baseos","reference_id":"cpe:/o:redhat:rhel_tus:8.8::baseos","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.8::baseos"},{"reference_url":"https://access.redhat.com/security/cve/CVE-2025-6021","reference_id":"CVE-2025-6021","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/security/cve/CVE-2025-6021"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10630","reference_id":"RHSA-2025:10630","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:10630"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10698","reference_id":"RHSA-2025:10698","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:10698"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10699","reference_id":"RHSA-2025:10699","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:10699"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11580","reference_id":"RHSA-2025:11580","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:11580"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11673","reference_id":"RHSA-2025:11673","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:11673"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:12098","reference_id":"RHSA-2025:12098","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:12098"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:12099","reference_id":"RHSA-2025:12099","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:12099"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:12199","reference_id":"RHSA-2025:12199","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:12199"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:12237","reference_id":"RHSA-2025:12237","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:12237"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:12239","reference_id":"RHSA-2025:12239","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:12239"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:12240","reference_id":"RHSA-2025:12240","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:12240"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:12241","reference_id":"RHSA-2025:12241","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:12241"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:13267","reference_id":"RHSA-2025:13267","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:13267"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:13289","reference_id":"RHSA-2025:13289","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:13289"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:13325","reference_id":"RHSA-2025:13325","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:13325"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:13335","reference_id":"RHSA-2025:13335","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:13335"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:13336","reference_id":"RHSA-2025:13336","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:13336"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:14059","reference_id":"RHSA-2025:14059","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:14059"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:14396","reference_id":"RHSA-2025:14396","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:14396"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:15308","reference_id":"RHSA-2025:15308","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:15308"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:15672","reference_id":"RHSA-2025:15672","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:15672"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19020","reference_id":"RHSA-2025:19020","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-03T14:41:19Z/"}],"url":"https://access.redhat.com/errata/RHSA-2025:19020"},{"reference_url":"https://usn.ubuntu.com/7694-1/","reference_id":"USN-7694-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7694-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1050284?format=json","purl":"pkg:deb/debian/libxml2@2.9.14%2Bdfsg-1.3~deb12u5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-62bb-e8vk-7uh4"},{"vulnerability":"VCID-d1ar-1945-sygd"},{"vulnerability":"VCID-knx8-5fpz-zbgn"},{"vulnerability":"VCID-nj3a-zqw9-6bga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.14%252Bdfsg-1.3~deb12u5"}],"aliases":["CVE-2025-6021"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-27jd-t23h-73f4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7237?format=json","vulnerability_id":"VCID-2b1g-gp84-87e8","summary":"Improper Restriction of Operations within the Bounds of a Memory Buffer\nHeap-based buffer overflow in the xmlGROW function in parser.c in libxml2 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.","references":[{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html"},{"reference_url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html"},{"reference_url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html"},{"reference_url":"http://marc.info/?l=bugtraq&m=145382616617563&w=2","reference_id":"","reference_type":"","scores":[],"url":"http://marc.info/?l=bugtraq&m=145382616617563&w=2"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2015-2549.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2015-2549.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2015-2550.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2015-2550.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2016-1089.html","reference_id":"","reference_type":"","scores":[],"url":"http://rhn.redhat.com/errata/RHSA-2016-1089.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7499.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7499.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2015-7499","reference_id":"","reference_type":"","scores":[{"value":"0.01577","scoring_system":"epss","scoring_elements":"0.81559","published_at":"2026-04-12T12:55:00Z"},{"value":"0.01577","scoring_system":"epss","scoring_elements":"0.81487","published_at":"2026-04-01T12:55:00Z"},{"value":"0.01577","scoring_system":"epss","scoring_elements":"0.81499","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01577","scoring_system":"epss","scoring_elements":"0.81521","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01577","scoring_system":"epss","scoring_elements":"0.81518","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01577","scoring_system":"epss","scoring_elements":"0.81546","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01577","scoring_system":"epss","scoring_elements":"0.81552","published_at":"2026-04-13T12:55:00Z"},{"value":"0.01577","scoring_system":"epss","scoring_elements":"0.81572","published_at":"2026-04-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2015-7499"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281925","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281925"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1819","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1819"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5312","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5312"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7497","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7497"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7498","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7498"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7499","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7499"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7500","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7500"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8241","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8241"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8317","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8317"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8710","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8710"},{"reference_url":"https://git.gnome.org/browse/libxml2/commit/?id=28cd9cb747a94483f4aea7f0968d202c20bb4cfc","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://git.gnome.org/browse/libxml2/commit/?id=28cd9cb747a94483f4aea7f0968d202c20bb4cfc"},{"reference_url":"https://git.gnome.org/browse/libxml2/commit/?id=35bcb1d758ed70aa7b257c9c3b3ff55e54e3d0da","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://git.gnome.org/browse/libxml2/commit/?id=35bcb1d758ed70aa7b257c9c3b3ff55e54e3d0da"},{"reference_url":"https://github.com/advisories/GHSA-jxjr-5h69-qw3w","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-jxjr-5h69-qw3w"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2015-7499.yml","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2015-7499.yml"},{"reference_url":"https://groups.google.com/forum/#!topic/ruby-security-ann/Dy7YiKb_pMM","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://groups.google.com/forum/#!topic/ruby-security-ann/Dy7YiKb_pMM"},{"reference_url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172","reference_id":"","reference_type":"","scores":[],"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172"},{"reference_url":"https://support.apple.com/HT206166","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206166"},{"reference_url":"https://support.apple.com/HT206167","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206167"},{"reference_url":"https://support.apple.com/HT206168","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206168"},{"reference_url":"https://support.apple.com/HT206169","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206169"},{"reference_url":"https://web.archive.org/web/20210724022841/http://www.securityfocus.com/bid/79509","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20210724022841/http://www.securityfocus.com/bid/79509"},{"reference_url":"https://web.archive.org/web/20211205133229/https://securitytracker.com/id/1034243","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20211205133229/https://securitytracker.com/id/1034243"},{"reference_url":"http://www.debian.org/security/2015/dsa-3430","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.debian.org/security/2015/dsa-3430"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"},{"reference_url":"http://www.securityfocus.com/bid/79509","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/79509"},{"reference_url":"http://www.securitytracker.com/id/1034243","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1034243"},{"reference_url":"http://www.ubuntu.com/usn/USN-2834-1","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.ubuntu.com/usn/USN-2834-1"},{"reference_url":"http://xmlsoft.org/news.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://xmlsoft.org/news.html"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_file_manager:3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:hp:icewall_file_manager:3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_file_manager:3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7499","reference_id":"CVE-2015-7499","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:P/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7499"},{"reference_url":"https://security.gentoo.org/glsa/201701-37","reference_id":"GLSA-201701-37","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.gentoo.org/glsa/201701-37"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:2549","reference_id":"RHSA-2015:2549","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:2549"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:2550","reference_id":"RHSA-2015:2550","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:2550"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:1089","reference_id":"RHSA-2016:1089","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:1089"},{"reference_url":"https://usn.ubuntu.com/2834-1/","reference_id":"USN-2834-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2834-1/"},{"reference_url":"https://usn.ubuntu.com/2875-1/","reference_id":"USN-2875-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2875-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"}],"aliases":["CVE-2015-7499","GHSA-jxjr-5h69-qw3w"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2b1g-gp84-87e8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7361?format=json","vulnerability_id":"VCID-2j62-5rjn-vyeu","summary":"Uncontrolled Resource Consumption\ndict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the \"type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about \"size\" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9047.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9047.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-9047","reference_id":"","reference_type":"","scores":[{"value":"0.0266","scoring_system":"epss","scoring_elements":"0.85787","published_at":"2026-04-13T12:55:00Z"},{"value":"0.0266","scoring_system":"epss","scoring_elements":"0.85779","published_at":"2026-04-09T12:55:00Z"},{"value":"0.0266","scoring_system":"epss","scoring_elements":"0.85793","published_at":"2026-04-11T12:55:00Z"},{"value":"0.0266","scoring_system":"epss","scoring_elements":"0.8579","published_at":"2026-04-12T12:55:00Z"},{"value":"0.02891","scoring_system":"epss","scoring_elements":"0.86261","published_at":"2026-04-02T12:55:00Z"},{"value":"0.02891","scoring_system":"epss","scoring_elements":"0.86279","published_at":"2026-04-07T12:55:00Z"},{"value":"0.02891","scoring_system":"epss","scoring_elements":"0.86298","published_at":"2026-04-08T12:55:00Z"},{"value":"0.02891","scoring_system":"epss","scoring_elements":"0.86278","published_at":"2026-04-04T12:55:00Z"},{"value":"0.03032","scoring_system":"epss","scoring_elements":"0.86594","published_at":"2026-04-01T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-9047"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7375","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7375"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7376","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7376"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:N/A:P"},{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452554","reference_id":"1452554","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452554"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863022","reference_id":"863022","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863022"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9047","reference_id":"CVE-2017-9047","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9047"},{"reference_url":"https://usn.ubuntu.com/3424-1/","reference_id":"USN-3424-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3424-1/"},{"reference_url":"https://usn.ubuntu.com/3424-2/","reference_id":"USN-3424-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3424-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"},{"url":"http://public2.vulnerablecode.io/api/packages/1038282?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-7%2Bdeb10u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-7%252Bdeb10u4"}],"aliases":["CVE-2017-9047"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qqte-z1e6-xuh7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7551?format=json","vulnerability_id":"VCID-qtp3-a1g7-8kgw","summary":"Improper Restriction of XML External Entity Reference\nlibxml2, as used in XMLSec and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9318.json","reference_id":"","reference_type":"","scores":[{"value":"6.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9318.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-9318","reference_id":"","reference_type":"","scores":[{"value":"0.00121","scoring_system":"epss","scoring_elements":"0.31023","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00121","scoring_system":"epss","scoring_elements":"0.31068","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00132","scoring_system":"epss","scoring_elements":"0.32866","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00132","scoring_system":"epss","scoring_elements":"0.32769","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00132","scoring_system":"epss","scoring_elements":"0.32722","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00132","scoring_system":"epss","scoring_elements":"0.32901","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00132","scoring_system":"epss","scoring_elements":"0.32735","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00175","scoring_system":"epss","scoring_elements":"0.3896","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00175","scoring_system":"epss","scoring_elements":"0.38972","published_at":"2026-04-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-9318"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9318","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9318"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:P"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395609","reference_id":"1395609","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395609"},{"reference_url":"https://github.com/lsh123/xmlsec/issues/43","reference_id":"43","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-04T16:39:51Z/"}],"url":"https://github.com/lsh123/xmlsec/issues/43"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=844581","reference_id":"844581","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=844581"},{"reference_url":"http://www.securityfocus.com/bid/94347","reference_id":"94347","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-04T16:39:51Z/"}],"url":"http://www.securityfocus.com/bid/94347"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9318","reference_id":"CVE-2016-9318","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9318"},{"reference_url":"https://bugzilla.gnome.org/show_bug.cgi?id=772726","reference_id":"show_bug.cgi?id=772726","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-04T16:39:51Z/"}],"url":"https://bugzilla.gnome.org/show_bug.cgi?id=772726"},{"reference_url":"https://usn.ubuntu.com/3739-2/","reference_id":"USN-3739-2","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-04T16:39:51Z/"}],"url":"https://usn.ubuntu.com/3739-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1050248?format=json","purl":"pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-62bb-e8vk-7uh4"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-d1ar-1945-sygd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-knx8-5fpz-zbgn"},{"vulnerability":"VCID-nj3a-zqw9-6bga"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.10%252Bdfsg-6.7%252Bdeb11u4"}],"aliases":["CVE-2016-9318"],"risk_score":3.0,"exploitability":"0.5","weighted_severity":"6.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qtp3-a1g7-8kgw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/33329?format=json","vulnerability_id":"VCID-qv3r-ppuc-zycz","summary":"libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation\nxmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.\nThe Nokogiri RubyGem has patched its vendored copy of libxml2 in order to prevent this issue from affecting nokogiri.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7595.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7595.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-7595","reference_id":"","reference_type":"","scores":[{"value":"0.00473","scoring_system":"epss","scoring_elements":"0.64712","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00473","scoring_system":"epss","scoring_elements":"0.6472","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00473","scoring_system":"epss","scoring_elements":"0.64672","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00473","scoring_system":"epss","scoring_elements":"0.64751","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00473","scoring_system":"epss","scoring_elements":"0.6474","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00473","scoring_system":"epss","scoring_elements":"0.64734","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65326","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65375","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65401","published_at":"2026-04-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-7595"},{"reference_url":"https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7595","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7595"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2020-7595.yml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2020-7595.yml"},{"reference_url":"https://github.com/sparklemotion/nokogiri","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/sparklemotion/nokogiri"},{"reference_url":"https://github.com/sparklemotion/nokogiri/issues/1992","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":""},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/sparklemotion/nokogiri/issues/1992"},{"reference_url":"https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7595","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7595"},{"reference_url":"https://security.gentoo.org/glsa/202010-04","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://security.gentoo.org/glsa/202010-04"},{"reference_url":"https://security.netapp.com/advisory/ntap-20200702-0005","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.netapp.com/advisory/ntap-20200702-0005"},{"reference_url":"https://security.netapp.com/advisory/ntap-20200702-0005/","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://security.netapp.com/advisory/ntap-20200702-0005/"},{"reference_url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08"},{"reference_url":"https://usn.ubuntu.com/4274-1","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://usn.ubuntu.com/4274-1"},{"reference_url":"https://usn.ubuntu.com/4274-1/","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://usn.ubuntu.com/4274-1/"},{"reference_url":"https://www.oracle.com/security-alerts/cpuapr2022.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujul2020.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://www.oracle.com/security-alerts/cpujul2020.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujul2022.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://www.oracle.com/security-alerts/cpujul2022.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpuoct2021.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1799786","reference_id":"1799786","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1799786"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/","reference_id":"545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/","reference_id":"5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=949582","reference_id":"949582","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=949582"},{"reference_url":"https://security.archlinux.org/ASA-202011-15","reference_id":"ASA-202011-15","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202011-15"},{"reference_url":"https://security.archlinux.org/AVG-1263","reference_id":"AVG-1263","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1263"},{"reference_url":"https://github.com/advisories/GHSA-7553-jr98-vx47","reference_id":"GHSA-7553-jr98-vx47","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-7553-jr98-vx47"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/","reference_id":"JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-03T15:33:37Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2644","reference_id":"RHSA-2020:2644","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2644"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2646","reference_id":"RHSA-2020:2646","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2646"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3996","reference_id":"RHSA-2020:3996","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3996"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:4479","reference_id":"RHSA-2020:4479","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:4479"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:0949","reference_id":"RHSA-2021:0949","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:0949"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1050248?format=json","purl":"pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-62bb-e8vk-7uh4"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-d1ar-1945-sygd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-knx8-5fpz-zbgn"},{"vulnerability":"VCID-nj3a-zqw9-6bga"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.10%252Bdfsg-6.7%252Bdeb11u4"}],"aliases":["CVE-2020-7595","GHSA-7553-jr98-vx47"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qv3r-ppuc-zycz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/61904?format=json","vulnerability_id":"VCID-qxwq-xwaw-nyak","summary":"Multiple vulnerabilities have been found in libxml2, the worst of\n which could result in the execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0663.json","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0663.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-0663","reference_id":"","reference_type":"","scores":[{"value":"0.01042","scoring_system":"epss","scoring_elements":"0.77393","published_at":"2026-04-01T12:55:00Z"},{"value":"0.01042","scoring_system":"epss","scoring_elements":"0.77448","published_at":"2026-04-13T12:55:00Z"},{"value":"0.01042","scoring_system":"epss","scoring_elements":"0.77471","published_at":"2026-04-11T12:55:00Z"},{"value":"0.01042","scoring_system":"epss","scoring_elements":"0.77451","published_at":"2026-04-12T12:55:00Z"},{"value":"0.01042","scoring_system":"epss","scoring_elements":"0.77399","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01042","scoring_system":"epss","scoring_elements":"0.77426","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01042","scoring_system":"epss","scoring_elements":"0.77405","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01042","scoring_system":"epss","scoring_elements":"0.77436","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01042","scoring_system":"epss","scoring_elements":"0.77445","published_at":"2026-04-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-0663"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7375","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7375"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7376","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7376"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:P"},{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1462225","reference_id":"1462225","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1462225"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870870","reference_id":"870870","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870870"},{"reference_url":"https://usn.ubuntu.com/3424-1/","reference_id":"USN-3424-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3424-1/"},{"reference_url":"https://usn.ubuntu.com/3424-2/","reference_id":"USN-3424-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3424-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"},{"url":"http://public2.vulnerablecode.io/api/packages/1038282?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-7%2Bdeb10u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-7%252Bdeb10u4"}],"aliases":["CVE-2017-0663"],"risk_score":3.6,"exploitability":"0.5","weighted_severity":"7.3","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qxwq-xwaw-nyak"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7397?format=json","vulnerability_id":"VCID-r7q9-7u4b-83cz","summary":"Out-of-bounds Read\nThe htmlCurrentChar function in libxml2, as used in Apple iOS, OS X, tvOS, and watchOS, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.","references":[{"reference_url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","reference_id":"","reference_type":"","scores":[],"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1833.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1833.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-1833","reference_id":"","reference_type":"","scores":[{"value":"0.01214","scoring_system":"epss","scoring_elements":"0.79013","published_at":"2026-04-13T12:55:00Z"},{"value":"0.01214","scoring_system":"epss","scoring_elements":"0.79023","published_at":"2026-04-12T12:55:00Z"},{"value":"0.01214","scoring_system":"epss","scoring_elements":"0.78967","published_at":"2026-04-01T12:55:00Z"},{"value":"0.01214","scoring_system":"epss","scoring_elements":"0.78973","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01214","scoring_system":"epss","scoring_elements":"0.78999","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01214","scoring_system":"epss","scoring_elements":"0.78984","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01214","scoring_system":"epss","scoring_elements":"0.79008","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01214","scoring_system":"epss","scoring_elements":"0.79015","published_at":"2026-04-09T12:55:00Z"},{"value":"0.01214","scoring_system":"epss","scoring_elements":"0.79039","published_at":"2026-04-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-1833"},{"reference_url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=636","reference_id":"","reference_type":"","scores":[],"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=636"},{"reference_url":"https://bugzilla.gnome.org/show_bug.cgi?id=758606","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.gnome.org/show_bug.cgi?id=758606"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483"},{"reference_url":"https://git.gnome.org/browse/libxml2/commit/?id=0bcd05c5cd83dec3406c8f68b769b1d610c72f76","reference_id":"","reference_type":"","scores":[],"url":"https://git.gnome.org/browse/libxml2/commit/?id=0bcd05c5cd83dec3406c8f68b769b1d610c72f76"},{"reference_url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","reference_id":"","reference_type":"","scores":[],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170"},{"reference_url":"https://support.apple.com/HT206564","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206564"},{"reference_url":"https://support.apple.com/HT206566","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206566"},{"reference_url":"https://support.apple.com/HT206567","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206567"},{"reference_url":"https://support.apple.com/HT206568","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206568"},{"reference_url":"https://www.debian.org/security/2016/dsa-3593","reference_id":"","reference_type":"","scores":[],"url":"https://www.debian.org/security/2016/dsa-3593"},{"reference_url":"https://www.tenable.com/security/tns-2016-18","reference_id":"","reference_type":"","scores":[],"url":"https://www.tenable.com/security/tns-2016-18"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"},{"reference_url":"http://www.securityfocus.com/bid/90691","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/90691"},{"reference_url":"http://www.securitytracker.com/id/1035890","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1035890"},{"reference_url":"http://www.ubuntu.com/usn/USN-2994-1","reference_id":"","reference_type":"","scores":[],"url":"http://www.ubuntu.com/usn/USN-2994-1"},{"reference_url":"http://xmlsoft.org/news.html","reference_id":"","reference_type":"","scores":[],"url":"http://xmlsoft.org/news.html"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338682","reference_id":"1338682","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338682"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1833","reference_id":"CVE-2016-1833","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:N/I:N/A:P"},{"value":"5.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1833"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:1292","reference_id":"RHSA-2016:1292","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:1292"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:2957","reference_id":"RHSA-2016:2957","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:2957"},{"reference_url":"https://usn.ubuntu.com/2994-1/","reference_id":"USN-2994-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2994-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"}],"aliases":["CVE-2016-1833"],"risk_score":2.5,"exploitability":"0.5","weighted_severity":"5.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-r7q9-7u4b-83cz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7949?format=json","vulnerability_id":"VCID-rhgj-t5cp-wkbh","summary":"Improper Restriction of Operations within the Bounds of a Memory Buffer\nlibxml2 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9048.json","reference_id":"","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9048.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-9048","reference_id":"","reference_type":"","scores":[{"value":"0.00601","scoring_system":"epss","scoring_elements":"0.69484","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00601","scoring_system":"epss","scoring_elements":"0.69492","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00601","scoring_system":"epss","scoring_elements":"0.69513","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00601","scoring_system":"epss","scoring_elements":"0.69498","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00618","scoring_system":"epss","scoring_elements":"0.69951","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00618","scoring_system":"epss","scoring_elements":"0.69911","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00618","scoring_system":"epss","scoring_elements":"0.69903","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00618","scoring_system":"epss","scoring_elements":"0.69926","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00618","scoring_system":"epss","scoring_elements":"0.69898","published_at":"2026-04-01T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-9048"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7375","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7375"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7376","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7376"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:N/A:P"},{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452549","reference_id":"1452549","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452549"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863021","reference_id":"863021","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863021"},{"reference_url":"http://www.securityfocus.com/bid/98556","reference_id":"98556","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-18T11:40:41Z/"}],"url":"http://www.securityfocus.com/bid/98556"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9048","reference_id":"CVE-2017-9048","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9048"},{"reference_url":"https://usn.ubuntu.com/3424-1/","reference_id":"USN-3424-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3424-1/"},{"reference_url":"https://usn.ubuntu.com/3424-2/","reference_id":"USN-3424-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3424-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"},{"url":"http://public2.vulnerablecode.io/api/packages/1038282?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-7%2Bdeb10u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-7%252Bdeb10u4"}],"aliases":["CVE-2017-9048"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rhgj-t5cp-wkbh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/10893?format=json","vulnerability_id":"VCID-rsvx-3f49-v3an","summary":"Improper Restriction of Recursive Entity References in DTDs (XML Entity Expansion)\nA flaw was found in libxml2. By exploiting an exponential entity expansion attack its possible bypassing all existing protection mechanisms and lead to a denial of service.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3541.json","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3541.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3541","reference_id":"","reference_type":"","scores":[{"value":"0.0006","scoring_system":"epss","scoring_elements":"0.18918","published_at":"2026-04-01T12:55:00Z"},{"value":"0.0006","scoring_system":"epss","scoring_elements":"0.1887","published_at":"2026-04-13T12:55:00Z"},{"value":"0.0006","scoring_system":"epss","scoring_elements":"0.18968","published_at":"2026-04-11T12:55:00Z"},{"value":"0.0006","scoring_system":"epss","scoring_elements":"0.18921","published_at":"2026-04-12T12:55:00Z"},{"value":"0.0006","scoring_system":"epss","scoring_elements":"0.19054","published_at":"2026-04-02T12:55:00Z"},{"value":"0.0006","scoring_system":"epss","scoring_elements":"0.19106","published_at":"2026-04-04T12:55:00Z"},{"value":"0.0006","scoring_system":"epss","scoring_elements":"0.18828","published_at":"2026-04-07T12:55:00Z"},{"value":"0.0006","scoring_system":"epss","scoring_elements":"0.18907","published_at":"2026-04-08T12:55:00Z"},{"value":"0.0006","scoring_system":"epss","scoring_elements":"0.18962","published_at":"2026-04-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3541"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950515","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950515"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3541","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3541"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://security.netapp.com/advisory/ntap-20210805-0007/","reference_id":"","reference_type":"","scores":[],"url":"https://security.netapp.com/advisory/ntap-20210805-0007/"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988603","reference_id":"988603","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988603"},{"reference_url":"https://security.archlinux.org/AVG-1883","reference_id":"AVG-1883","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1883"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3541","reference_id":"CVE-2021-3541","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3541"},{"reference_url":"https://security.gentoo.org/glsa/202107-05","reference_id":"GLSA-202107-05","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202107-05"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:2569","reference_id":"RHSA-2021:2569","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:2569"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:1389","reference_id":"RHSA-2022:1389","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:1389"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:1390","reference_id":"RHSA-2022:1390","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:1390"},{"reference_url":"https://usn.ubuntu.com/4991-1/","reference_id":"USN-4991-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4991-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1050248?format=json","purl":"pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-62bb-e8vk-7uh4"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-d1ar-1945-sygd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-knx8-5fpz-zbgn"},{"vulnerability":"VCID-nj3a-zqw9-6bga"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.10%252Bdfsg-6.7%252Bdeb11u4"}],"aliases":["CVE-2021-3541"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rsvx-3f49-v3an"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7876?format=json","vulnerability_id":"VCID-s3j9-1zq5-zkf5","summary":"Deserialization of Untrusted Data\nThe xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627.","references":[{"reference_url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","reference_id":"","reference_type":"","scores":[],"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4483.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4483.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-4483","reference_id":"","reference_type":"","scores":[{"value":"0.0127","scoring_system":"epss","scoring_elements":"0.7949","published_at":"2026-04-13T12:55:00Z"},{"value":"0.0127","scoring_system":"epss","scoring_elements":"0.79516","published_at":"2026-04-11T12:55:00Z"},{"value":"0.0127","scoring_system":"epss","scoring_elements":"0.79499","published_at":"2026-04-12T12:55:00Z"},{"value":"0.0127","scoring_system":"epss","scoring_elements":"0.7944","published_at":"2026-04-01T12:55:00Z"},{"value":"0.0127","scoring_system":"epss","scoring_elements":"0.79447","published_at":"2026-04-02T12:55:00Z"},{"value":"0.0127","scoring_system":"epss","scoring_elements":"0.79471","published_at":"2026-04-04T12:55:00Z"},{"value":"0.0127","scoring_system":"epss","scoring_elements":"0.79458","published_at":"2026-04-07T12:55:00Z"},{"value":"0.0127","scoring_system":"epss","scoring_elements":"0.79486","published_at":"2026-04-08T12:55:00Z"},{"value":"0.0127","scoring_system":"epss","scoring_elements":"0.79494","published_at":"2026-04-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-4483"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:N/I:N/A:P"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://git.gnome.org/browse/libxml2/commit/?id=c97750d11bb8b6f3303e7131fe526a61ac65bcfd","reference_id":"","reference_type":"","scores":[],"url":"https://git.gnome.org/browse/libxml2/commit/?id=c97750d11bb8b6f3303e7131fe526a61ac65bcfd"},{"reference_url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"},{"reference_url":"https://www.tenable.com/security/tns-2016-18","reference_id":"","reference_type":"","scores":[],"url":"https://www.tenable.com/security/tns-2016-18"},{"reference_url":"http://www.debian.org/security/2016/dsa-3593","reference_id":"","reference_type":"","scores":[],"url":"http://www.debian.org/security/2016/dsa-3593"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/05/03/8","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2016/05/03/8"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/05/04/7","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2016/05/04/7"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/06/07/4","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2016/06/07/4"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/06/07/5","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2016/06/07/5"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"},{"reference_url":"http://www.securityfocus.com/bid/90013","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/90013"},{"reference_url":"http://www.securitytracker.com/id/1036348","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1036348"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332820","reference_id":"1332820","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332820"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823405","reference_id":"823405","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823405"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4483","reference_id":"CVE-2016-4483","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:N/A:P"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4483"},{"reference_url":"https://security.gentoo.org/glsa/201701-37","reference_id":"GLSA-201701-37","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-37"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:2957","reference_id":"RHSA-2016:2957","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:2957"},{"reference_url":"https://usn.ubuntu.com/2994-1/","reference_id":"USN-2994-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2994-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"}],"aliases":["CVE-2016-4483"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-s3j9-1zq5-zkf5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/14289?format=json","vulnerability_id":"VCID-s9r4-a3uz-4yhp","summary":"Integer Overflow or Wraparound\nIn libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-29824.json","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-29824.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-29824","reference_id":"","reference_type":"","scores":[{"value":"0.00074","scoring_system":"epss","scoring_elements":"0.22466","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00074","scoring_system":"epss","scoring_elements":"0.22489","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00074","scoring_system":"epss","scoring_elements":"0.22543","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00074","scoring_system":"epss","scoring_elements":"0.22562","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00074","scoring_system":"epss","scoring_elements":"0.22521","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00074","scoring_system":"epss","scoring_elements":"0.22407","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22976","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.2302","published_at":"2026-04-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-29824"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29824","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29824"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab","reference_id":"","reference_type":"","scores":[],"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab"},{"reference_url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd","reference_id":"","reference_type":"","scores":[],"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd"},{"reference_url":"https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14","reference_id":"","reference_type":"","scores":[],"url":"https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14"},{"reference_url":"https://gitlab.gnome.org/GNOME/libxslt/-/tags","reference_id":"","reference_type":"","scores":[],"url":"https://gitlab.gnome.org/GNOME/libxslt/-/tags"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FZOBT5Y6Y2QLDDX2HZGMV7MJMWGXORKK/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FZOBT5Y6Y2QLDDX2HZGMV7MJMWGXORKK/"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010526","reference_id":"1010526","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010526"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082158","reference_id":"2082158","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082158"},{"reference_url":"https://security.archlinux.org/AVG-2726","reference_id":"AVG-2726","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2726"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29824","reference_id":"CVE-2022-29824","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29824"},{"reference_url":"https://security.gentoo.org/glsa/202210-03","reference_id":"GLSA-202210-03","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202210-03"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5250","reference_id":"RHSA-2022:5250","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5250"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5317","reference_id":"RHSA-2022:5317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:8841","reference_id":"RHSA-2022:8841","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:8841"},{"reference_url":"https://usn.ubuntu.com/5422-1/","reference_id":"USN-5422-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5422-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1038282?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-7%2Bdeb10u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-7%252Bdeb10u4"},{"url":"http://public2.vulnerablecode.io/api/packages/1050248?format=json","purl":"pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-62bb-e8vk-7uh4"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-d1ar-1945-sygd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-knx8-5fpz-zbgn"},{"vulnerability":"VCID-nj3a-zqw9-6bga"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.10%252Bdfsg-6.7%252Bdeb11u4"}],"aliases":["CVE-2022-29824"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-s9r4-a3uz-4yhp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/9765?format=json","vulnerability_id":"VCID-t53m-6vvr-27cf","summary":"Loop with Unreachable Exit Condition ('Infinite Loop')\nlibxml2, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14567.json","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14567.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-14567","reference_id":"","reference_type":"","scores":[{"value":"0.00677","scoring_system":"epss","scoring_elements":"0.71451","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00677","scoring_system":"epss","scoring_elements":"0.71459","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00677","scoring_system":"epss","scoring_elements":"0.71476","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00677","scoring_system":"epss","scoring_elements":"0.71449","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00677","scoring_system":"epss","scoring_elements":"0.71489","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00677","scoring_system":"epss","scoring_elements":"0.71501","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00677","scoring_system":"epss","scoring_elements":"0.71524","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00677","scoring_system":"epss","scoring_elements":"0.71508","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00677","scoring_system":"epss","scoring_elements":"0.7149","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-14567"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14567","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14567"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619875","reference_id":"1619875","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619875"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14567","reference_id":"CVE-2018-14567","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14567"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:1190","reference_id":"RHSA-2020:1190","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:1190"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1050248?format=json","purl":"pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-62bb-e8vk-7uh4"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-d1ar-1945-sygd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-knx8-5fpz-zbgn"},{"vulnerability":"VCID-nj3a-zqw9-6bga"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.10%252Bdfsg-6.7%252Bdeb11u4"}],"aliases":["CVE-2018-14567"],"risk_score":1.9,"exploitability":"0.5","weighted_severity":"3.9","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-t53m-6vvr-27cf"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7419?format=json","vulnerability_id":"VCID-t9pa-yw9s-kqb9","summary":"Improper Input Validation\nXML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.","references":[{"reference_url":"http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000066.html","reference_id":"","reference_type":"","scores":[],"url":"http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000066.html"},{"reference_url":"http://jvn.jp/en/jp/JVN17535578/index.html","reference_id":"","reference_type":"","scores":[],"url":"http://jvn.jp/en/jp/JVN17535578/index.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","reference_id":"","reference_type":"","scores":[],"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4449.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4449.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-4449","reference_id":"","reference_type":"","scores":[{"value":"0.00121","scoring_system":"epss","scoring_elements":"0.31035","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00121","scoring_system":"epss","scoring_elements":"0.31123","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00121","scoring_system":"epss","scoring_elements":"0.3108","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00121","scoring_system":"epss","scoring_elements":"0.31041","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00121","scoring_system":"epss","scoring_elements":"0.31166","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00121","scoring_system":"epss","scoring_elements":"0.31212","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00121","scoring_system":"epss","scoring_elements":"0.31032","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00121","scoring_system":"epss","scoring_elements":"0.31088","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00121","scoring_system":"epss","scoring_elements":"0.31117","published_at":"2026-04-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-4449"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:N/I:P/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://git.gnome.org/browse/libxml2/commit/?id=b1d34de46a11323fccffa9fadeb33be670d602f5","reference_id":"","reference_type":"","scores":[],"url":"https://git.gnome.org/browse/libxml2/commit/?id=b1d34de46a11323fccffa9fadeb33be670d602f5"},{"reference_url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709","reference_id":"","reference_type":"","scores":[],"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709"},{"reference_url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","reference_id":"","reference_type":"","scores":[],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170"},{"reference_url":"https://support.apple.com/HT206899","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206899"},{"reference_url":"https://support.apple.com/HT206901","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206901"},{"reference_url":"https://support.apple.com/HT206902","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206902"},{"reference_url":"https://support.apple.com/HT206903","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206903"},{"reference_url":"https://support.apple.com/HT206904","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206904"},{"reference_url":"https://support.apple.com/HT206905","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206905"},{"reference_url":"https://support.cybozu.com/ja-jp/article/9735","reference_id":"","reference_type":"","scores":[],"url":"https://support.cybozu.com/ja-jp/article/9735"},{"reference_url":"https://www.debian.org/security/2016/dsa-3593","reference_id":"","reference_type":"","scores":[],"url":"https://www.debian.org/security/2016/dsa-3593"},{"reference_url":"https://www.tenable.com/security/tns-2016-18","reference_id":"","reference_type":"","scores":[],"url":"https://www.tenable.com/security/tns-2016-18"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/05/25/2","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2016/05/25/2"},{"reference_url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"},{"reference_url":"http://www.securityfocus.com/bid/90865","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/90865"},{"reference_url":"http://www.securitytracker.com/id/1036348","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1036348"},{"reference_url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722","reference_id":"","reference_type":"","scores":[],"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722"},{"reference_url":"http://www.ubuntu.com/usn/USN-2994-1","reference_id":"","reference_type":"","scores":[],"url":"http://www.ubuntu.com/usn/USN-2994-1"},{"reference_url":"http://xmlsoft.org/news.html","reference_id":"","reference_type":"","scores":[],"url":"http://xmlsoft.org/news.html"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338701","reference_id":"1338701","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338701"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4449","reference_id":"CVE-2016-4449","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:N/A:P"},{"value":"7.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4449"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:1292","reference_id":"RHSA-2016:1292","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:1292"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:2957","reference_id":"RHSA-2016:2957","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:2957"},{"reference_url":"https://usn.ubuntu.com/2994-1/","reference_id":"USN-2994-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2994-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"}],"aliases":["CVE-2016-4449"],"risk_score":3.2,"exploitability":"0.5","weighted_severity":"6.4","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-t9pa-yw9s-kqb9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7418?format=json","vulnerability_id":"VCID-tazr-2qgq-77fy","summary":"Improper Restriction of Operations within the Bounds of a Memory Buffer\nThe xmlParseElementDecl function in parser.c in libxml2 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.","references":[{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","reference_id":"","reference_type":"","scores":[],"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4447.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4447.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-4447","reference_id":"","reference_type":"","scores":[{"value":"0.02064","scoring_system":"epss","scoring_elements":"0.83924","published_at":"2026-04-13T12:55:00Z"},{"value":"0.02064","scoring_system":"epss","scoring_elements":"0.83934","published_at":"2026-04-11T12:55:00Z"},{"value":"0.02064","scoring_system":"epss","scoring_elements":"0.83928","published_at":"2026-04-12T12:55:00Z"},{"value":"0.02064","scoring_system":"epss","scoring_elements":"0.83856","published_at":"2026-04-01T12:55:00Z"},{"value":"0.02064","scoring_system":"epss","scoring_elements":"0.8387","published_at":"2026-04-02T12:55:00Z"},{"value":"0.02064","scoring_system":"epss","scoring_elements":"0.83886","published_at":"2026-04-04T12:55:00Z"},{"value":"0.02064","scoring_system":"epss","scoring_elements":"0.83887","published_at":"2026-04-07T12:55:00Z"},{"value":"0.02064","scoring_system":"epss","scoring_elements":"0.83911","published_at":"2026-04-08T12:55:00Z"},{"value":"0.02064","scoring_system":"epss","scoring_elements":"0.83917","published_at":"2026-04-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-4447"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:N/I:N/A:P"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://git.gnome.org/browse/libxml2/commit/?id=00906759053986b8079985644172085f74331f83","reference_id":"","reference_type":"","scores":[],"url":"https://git.gnome.org/browse/libxml2/commit/?id=00906759053986b8079985644172085f74331f83"},{"reference_url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709","reference_id":"","reference_type":"","scores":[],"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709"},{"reference_url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","reference_id":"","reference_type":"","scores":[],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170"},{"reference_url":"https://support.apple.com/HT206899","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206899"},{"reference_url":"https://support.apple.com/HT206901","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206901"},{"reference_url":"https://support.apple.com/HT206902","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206902"},{"reference_url":"https://support.apple.com/HT206903","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206903"},{"reference_url":"https://support.apple.com/HT206904","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206904"},{"reference_url":"https://support.apple.com/HT206905","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206905"},{"reference_url":"https://www.debian.org/security/2016/dsa-3593","reference_id":"","reference_type":"","scores":[],"url":"https://www.debian.org/security/2016/dsa-3593"},{"reference_url":"https://www.tenable.com/security/tns-2016-18","reference_id":"","reference_type":"","scores":[],"url":"https://www.tenable.com/security/tns-2016-18"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/05/25/2","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2016/05/25/2"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"},{"reference_url":"http://www.securityfocus.com/bid/90864","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/90864"},{"reference_url":"http://www.securitytracker.com/id/1036348","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1036348"},{"reference_url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722","reference_id":"","reference_type":"","scores":[],"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722"},{"reference_url":"http://www.ubuntu.com/usn/USN-2994-1","reference_id":"","reference_type":"","scores":[],"url":"http://www.ubuntu.com/usn/USN-2994-1"},{"reference_url":"http://xmlsoft.org/news.html","reference_id":"","reference_type":"","scores":[],"url":"http://xmlsoft.org/news.html"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338686","reference_id":"1338686","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338686"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4447","reference_id":"CVE-2016-4447","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:N/A:P"},{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4447"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:1292","reference_id":"RHSA-2016:1292","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:1292"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:2957","reference_id":"RHSA-2016:2957","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:2957"},{"reference_url":"https://usn.ubuntu.com/2994-1/","reference_id":"USN-2994-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2994-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"}],"aliases":["CVE-2016-4447"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tazr-2qgq-77fy"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/9793?format=json","vulnerability_id":"VCID-tn87-vke6-kuf6","summary":"Use After Free\nUse after free in libxml2, as used in Google Chrome and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2017:3401","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2017:3401"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:0287","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:0287"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15412.json","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15412.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-15412","reference_id":"","reference_type":"","scores":[{"value":"0.01891","scoring_system":"epss","scoring_elements":"0.83181","published_at":"2026-04-09T12:55:00Z"},{"value":"0.01891","scoring_system":"epss","scoring_elements":"0.83187","published_at":"2026-04-13T12:55:00Z"},{"value":"0.01891","scoring_system":"epss","scoring_elements":"0.83149","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01891","scoring_system":"epss","scoring_elements":"0.83174","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01891","scoring_system":"epss","scoring_elements":"0.83191","published_at":"2026-04-12T12:55:00Z"},{"value":"0.01891","scoring_system":"epss","scoring_elements":"0.83197","published_at":"2026-04-11T12:55:00Z"},{"value":"0.01943","scoring_system":"epss","scoring_elements":"0.8337","published_at":"2026-04-01T12:55:00Z"},{"value":"0.01943","scoring_system":"epss","scoring_elements":"0.83383","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01943","scoring_system":"epss","scoring_elements":"0.83398","published_at":"2026-04-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-15412"},{"reference_url":"https://bugzilla.gnome.org/show_bug.cgi?id=783160","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.gnome.org/show_bug.cgi?id=783160"},{"reference_url":"https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"},{"reference_url":"https://crbug.com/727039","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://crbug.com/727039"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15412","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15412"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2017-15412.yml","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2017-15412.yml"},{"reference_url":"https://github.com/sparklemotion/nokogiri/issues/1714","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3","scoring_elements":""},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/sparklemotion/nokogiri/issues/1714"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2017/12/msg00014.html","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2017/12/msg00014.html"},{"reference_url":"https://web.archive.org/web/20201208155618/http://www.securitytracker.com/id/1040348","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20201208155618/http://www.securitytracker.com/id/1040348"},{"reference_url":"https://www.debian.org/security/2018/dsa-4086","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2018/dsa-4086"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523128","reference_id":"1523128","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523128"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883790","reference_id":"883790","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883790"},{"reference_url":"https://security.archlinux.org/ASA-201712-5","reference_id":"ASA-201712-5","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201712-5"},{"reference_url":"https://security.archlinux.org/AVG-544","reference_id":"AVG-544","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-544"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15412","reference_id":"CVE-2017-15412","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15412"},{"reference_url":"https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-15412.html","reference_id":"CVE-2017-15412.HTML","reference_type":"","scores":[],"url":"https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-15412.html"},{"reference_url":"https://github.com/advisories/GHSA-r58r-74gx-6wx3","reference_id":"GHSA-r58r-74gx-6wx3","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-r58r-74gx-6wx3"},{"reference_url":"https://security.gentoo.org/glsa/201801-03","reference_id":"GLSA-201801-03","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.gentoo.org/glsa/201801-03"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:1190","reference_id":"RHSA-2020:1190","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:1190"},{"reference_url":"https://usn.ubuntu.com/3513-1/","reference_id":"USN-3513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3513-1/"},{"reference_url":"https://usn.ubuntu.com/3513-2/","reference_id":"USN-3513-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3513-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"},{"url":"http://public2.vulnerablecode.io/api/packages/1038282?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-7%2Bdeb10u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-7%252Bdeb10u4"}],"aliases":["CVE-2017-15412","GHSA-r58r-74gx-6wx3"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tn87-vke6-kuf6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7285?format=json","vulnerability_id":"VCID-tyk2-gq2c-bbcn","summary":"Improper Restriction of Operations within the Bounds of a Memory Buffer\nThe htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2073.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2073.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-2073","reference_id":"","reference_type":"","scores":[{"value":"0.01321","scoring_system":"epss","scoring_elements":"0.7988","published_at":"2026-04-13T12:55:00Z"},{"value":"0.01321","scoring_system":"epss","scoring_elements":"0.79905","published_at":"2026-04-11T12:55:00Z"},{"value":"0.01321","scoring_system":"epss","scoring_elements":"0.79887","published_at":"2026-04-12T12:55:00Z"},{"value":"0.01321","scoring_system":"epss","scoring_elements":"0.79831","published_at":"2026-04-01T12:55:00Z"},{"value":"0.01321","scoring_system":"epss","scoring_elements":"0.79839","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01321","scoring_system":"epss","scoring_elements":"0.7986","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01321","scoring_system":"epss","scoring_elements":"0.79848","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01321","scoring_system":"epss","scoring_elements":"0.79876","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01321","scoring_system":"epss","scoring_elements":"0.79884","published_at":"2026-04-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-2073"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:N/I:N/A:P"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://www.debian.org/security/2016/dsa-3593","reference_id":"","reference_type":"","scores":[],"url":"https://www.debian.org/security/2016/dsa-3593"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/01/25/6","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2016/01/25/6"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/01/26/7","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2016/01/26/7"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"},{"reference_url":"http://www.securityfocus.com/bid/85267","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/85267"},{"reference_url":"http://www.securitytracker.com/id/1035011","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1035011"},{"reference_url":"http://www.ubuntu.com/usn/USN-2994-1","reference_id":"","reference_type":"","scores":[],"url":"http://www.ubuntu.com/usn/USN-2994-1"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301928","reference_id":"1301928","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301928"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812807","reference_id":"812807","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812807"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2073","reference_id":"CVE-2016-2073","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:N/I:N/A:P"},{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2073"},{"reference_url":"https://security.gentoo.org/glsa/201701-37","reference_id":"GLSA-201701-37","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-37"},{"reference_url":"https://usn.ubuntu.com/2994-1/","reference_id":"USN-2994-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2994-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"}],"aliases":["CVE-2016-2073"],"risk_score":3.0,"exploitability":"0.5","weighted_severity":"5.9","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tyk2-gq2c-bbcn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/57378?format=json","vulnerability_id":"VCID-udew-3gre-13hy","summary":"Multiple vulnerabilities have been found in libxml2, the worst of which could result in arbitrary code execution.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-40303.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-40303.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40303","reference_id":"","reference_type":"","scores":[{"value":"0.00181","scoring_system":"epss","scoring_elements":"0.39746","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00181","scoring_system":"epss","scoring_elements":"0.39712","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00181","scoring_system":"epss","scoring_elements":"0.39768","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00181","scoring_system":"epss","scoring_elements":"0.39687","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00181","scoring_system":"epss","scoring_elements":"0.39741","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00181","scoring_system":"epss","scoring_elements":"0.39755","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00181","scoring_system":"epss","scoring_elements":"0.39765","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00181","scoring_system":"epss","scoring_elements":"0.39729","published_at":"2026-04-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40303"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40303","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40303"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40304","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40304"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0"},{"reference_url":"https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3"},{"reference_url":"https://nokogiri.org/CHANGELOG.html#1139-2022-10-18","reference_id":"","reference_type":"","scores":[],"url":"https://nokogiri.org/CHANGELOG.html#1139-2022-10-18"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1022224","reference_id":"1022224","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1022224"},{"reference_url":"http://seclists.org/fulldisclosure/2022/Dec/21","reference_id":"21","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"http://seclists.org/fulldisclosure/2022/Dec/21"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136266","reference_id":"2136266","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136266"},{"reference_url":"http://seclists.org/fulldisclosure/2022/Dec/24","reference_id":"24","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"http://seclists.org/fulldisclosure/2022/Dec/24"},{"reference_url":"http://seclists.org/fulldisclosure/2022/Dec/25","reference_id":"25","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"http://seclists.org/fulldisclosure/2022/Dec/25"},{"reference_url":"http://seclists.org/fulldisclosure/2022/Dec/26","reference_id":"26","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"http://seclists.org/fulldisclosure/2022/Dec/26"},{"reference_url":"http://seclists.org/fulldisclosure/2022/Dec/27","reference_id":"27","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"http://seclists.org/fulldisclosure/2022/Dec/27"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40303","reference_id":"CVE-2022-40303","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40303"},{"reference_url":"https://security.gentoo.org/glsa/202210-39","reference_id":"GLSA-202210-39","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202210-39"},{"reference_url":"https://support.apple.com/kb/HT213531","reference_id":"HT213531","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"https://support.apple.com/kb/HT213531"},{"reference_url":"https://support.apple.com/kb/HT213533","reference_id":"HT213533","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"https://support.apple.com/kb/HT213533"},{"reference_url":"https://support.apple.com/kb/HT213534","reference_id":"HT213534","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"https://support.apple.com/kb/HT213534"},{"reference_url":"https://support.apple.com/kb/HT213535","reference_id":"HT213535","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"https://support.apple.com/kb/HT213535"},{"reference_url":"https://support.apple.com/kb/HT213536","reference_id":"HT213536","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"https://support.apple.com/kb/HT213536"},{"reference_url":"https://security.netapp.com/advisory/ntap-20221209-0003/","reference_id":"ntap-20221209-0003","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-29T04:23:26Z/"}],"url":"https://security.netapp.com/advisory/ntap-20221209-0003/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:8841","reference_id":"RHSA-2022:8841","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:8841"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:0173","reference_id":"RHSA-2023:0173","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:0173"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:0338","reference_id":"RHSA-2023:0338","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:0338"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:0413","reference_id":"RHSA-2024:0413","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:0413"},{"reference_url":"https://usn.ubuntu.com/5760-1/","reference_id":"USN-5760-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5760-1/"},{"reference_url":"https://usn.ubuntu.com/5760-2/","reference_id":"USN-5760-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5760-2/"},{"reference_url":"https://usn.ubuntu.com/7659-1/","reference_id":"USN-7659-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7659-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1050248?format=json","purl":"pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-62bb-e8vk-7uh4"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-d1ar-1945-sygd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-knx8-5fpz-zbgn"},{"vulnerability":"VCID-nj3a-zqw9-6bga"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.10%252Bdfsg-6.7%252Bdeb11u4"}],"aliases":["CVE-2022-40303"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-udew-3gre-13hy"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/81686?format=json","vulnerability_id":"VCID-ugyh-dycm-3bc3","summary":"libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19956.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19956.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2019-19956","reference_id":"","reference_type":"","scores":[{"value":"0.00154","scoring_system":"epss","scoring_elements":"0.36075","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00154","scoring_system":"epss","scoring_elements":"0.3601","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00154","scoring_system":"epss","scoring_elements":"0.36204","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00154","scoring_system":"epss","scoring_elements":"0.36231","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00154","scoring_system":"epss","scoring_elements":"0.36066","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00154","scoring_system":"epss","scoring_elements":"0.36115","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00154","scoring_system":"epss","scoring_elements":"0.36133","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00154","scoring_system":"epss","scoring_elements":"0.3614","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00154","scoring_system":"epss","scoring_elements":"0.36102","published_at":"2026-04-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-19956"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19956","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19956"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788856","reference_id":"1788856","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788856"},{"reference_url":"https://gitlab.gnome.org/GNOME/libxml2/commit/5a02583c7e683896d84878bd90641d8d9b0d0549","reference_id":"5a02583c7e683896d84878bd90641d8d9b0d0549","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T18:29:09Z/"}],"url":"https://gitlab.gnome.org/GNOME/libxml2/commit/5a02583c7e683896d84878bd90641d8d9b0d0549"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/","reference_id":"5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T18:29:09Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19956","reference_id":"CVE-2019-19956","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19956"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/","reference_id":"JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T18:29:09Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00005.html","reference_id":"msg00005.html","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T18:29:09Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00005.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2019/12/msg00032.html","reference_id":"msg00032.html","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T18:29:09Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2019/12/msg00032.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20200114-0002/","reference_id":"ntap-20200114-0002","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T18:29:09Z/"}],"url":"https://security.netapp.com/advisory/ntap-20200114-0002/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2644","reference_id":"RHSA-2020:2644","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2644"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2646","reference_id":"RHSA-2020:2646","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2646"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3996","reference_id":"RHSA-2020:3996","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3996"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:4479","reference_id":"RHSA-2020:4479","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:4479"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:0949","reference_id":"RHSA-2021:0949","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:0949"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1050248?format=json","purl":"pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-62bb-e8vk-7uh4"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-d1ar-1945-sygd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-knx8-5fpz-zbgn"},{"vulnerability":"VCID-nj3a-zqw9-6bga"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.10%252Bdfsg-6.7%252Bdeb11u4"}],"aliases":["CVE-2019-19956"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ugyh-dycm-3bc3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7399?format=json","vulnerability_id":"VCID-vcq9-93xd-nfbe","summary":"Out-of-bounds Read\nThe xmlPArserPrintFileContextInternal function in libxml2, as used in Apple iOS, OS X, tvOS, and watchOS, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.","references":[{"reference_url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","reference_id":"","reference_type":"","scores":[],"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1838.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1838.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-1838","reference_id":"","reference_type":"","scores":[{"value":"0.1065","scoring_system":"epss","scoring_elements":"0.93302","published_at":"2026-04-13T12:55:00Z"},{"value":"0.1065","scoring_system":"epss","scoring_elements":"0.93301","published_at":"2026-04-12T12:55:00Z"},{"value":"0.1065","scoring_system":"epss","scoring_elements":"0.93272","published_at":"2026-04-01T12:55:00Z"},{"value":"0.1065","scoring_system":"epss","scoring_elements":"0.93281","published_at":"2026-04-02T12:55:00Z"},{"value":"0.1065","scoring_system":"epss","scoring_elements":"0.93287","published_at":"2026-04-04T12:55:00Z"},{"value":"0.1065","scoring_system":"epss","scoring_elements":"0.93285","published_at":"2026-04-07T12:55:00Z"},{"value":"0.1065","scoring_system":"epss","scoring_elements":"0.93294","published_at":"2026-04-08T12:55:00Z"},{"value":"0.1065","scoring_system":"epss","scoring_elements":"0.93298","published_at":"2026-04-09T12:55:00Z"},{"value":"0.1065","scoring_system":"epss","scoring_elements":"0.93303","published_at":"2026-04-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-1838"},{"reference_url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=639","reference_id":"","reference_type":"","scores":[],"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=639"},{"reference_url":"https://bugzilla.gnome.org/show_bug.cgi?id=758588","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.gnome.org/show_bug.cgi?id=758588"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483"},{"reference_url":"https://git.gnome.org/browse/libxml2/commit/?id=db07dd613e461df93dde7902c6505629bf0734e9","reference_id":"","reference_type":"","scores":[],"url":"https://git.gnome.org/browse/libxml2/commit/?id=db07dd613e461df93dde7902c6505629bf0734e9"},{"reference_url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","reference_id":"","reference_type":"","scores":[],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170"},{"reference_url":"https://support.apple.com/HT206564","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206564"},{"reference_url":"https://support.apple.com/HT206566","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206566"},{"reference_url":"https://support.apple.com/HT206567","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206567"},{"reference_url":"https://support.apple.com/HT206568","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206568"},{"reference_url":"https://www.debian.org/security/2016/dsa-3593","reference_id":"","reference_type":"","scores":[],"url":"https://www.debian.org/security/2016/dsa-3593"},{"reference_url":"https://www.tenable.com/security/tns-2016-18","reference_id":"","reference_type":"","scores":[],"url":"https://www.tenable.com/security/tns-2016-18"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"},{"reference_url":"http://www.securityfocus.com/bid/90691","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/90691"},{"reference_url":"http://www.securitytracker.com/id/1035890","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1035890"},{"reference_url":"http://www.ubuntu.com/usn/USN-2994-1","reference_id":"","reference_type":"","scores":[],"url":"http://www.ubuntu.com/usn/USN-2994-1"},{"reference_url":"http://xmlsoft.org/news.html","reference_id":"","reference_type":"","scores":[],"url":"http://xmlsoft.org/news.html"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338705","reference_id":"1338705","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338705"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"},{"reference_url":"https://code.google.com/p/google-security-research/issues/detail?id=639","reference_id":"CVE-2016-1838","reference_type":"exploit","scores":[],"url":"https://code.google.com/p/google-security-research/issues/detail?id=639"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/39493.txt","reference_id":"CVE-2016-1838","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/39493.txt"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1838","reference_id":"CVE-2016-1838","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:N/I:N/A:P"},{"value":"5.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1838"},{"reference_url":"https://security.gentoo.org/glsa/201701-37","reference_id":"GLSA-201701-37","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-37"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:1292","reference_id":"RHSA-2016:1292","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:1292"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:2957","reference_id":"RHSA-2016:2957","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:2957"},{"reference_url":"https://usn.ubuntu.com/2994-1/","reference_id":"USN-2994-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2994-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"}],"aliases":["CVE-2016-1838"],"risk_score":10.0,"exploitability":"2.0","weighted_severity":"5.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vcq9-93xd-nfbe"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/44705?format=json","vulnerability_id":"VCID-vf7b-s3y3-sfhw","summary":"Multiple vulnerabilities have been found in libxml2, the worst of\n which could result in a Denial of Service condition.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3537.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3537.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3537","reference_id":"","reference_type":"","scores":[{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29532","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29584","published_at":"2026-04-12T12:55:00Z"},{"value":"0.0014","scoring_system":"epss","scoring_elements":"0.34266","published_at":"2026-04-02T12:55:00Z"},{"value":"0.0014","scoring_system":"epss","scoring_elements":"0.34299","published_at":"2026-04-04T12:55:00Z"},{"value":"0.0014","scoring_system":"epss","scoring_elements":"0.33927","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.3626","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.36337","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.36331","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.36309","published_at":"2026-04-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3537"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956522","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956522"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3537","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3537"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2021-3537.yml","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2021-3537.yml"},{"reference_url":"https://github.com/sparklemotion/nokogiri","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/sparklemotion/nokogiri"},{"reference_url":"https://github.com/sparklemotion/nokogiri/blob/2edbbef95f1dc12c1ddc5ebda71b9159026245fe/CHANGELOG.md?plain=1#L722","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/sparklemotion/nokogiri/blob/2edbbef95f1dc12c1ddc5ebda71b9159026245fe/CHANGELOG.md?plain=1#L722"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/"},{"reference_url":"https://nokogiri.org/CHANGELOG.html#1114-2021-05-14","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":""},{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nokogiri.org/CHANGELOG.html#1114-2021-05-14"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3537","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3537"},{"reference_url":"https://security.netapp.com/advisory/ntap-20210625-0002","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.netapp.com/advisory/ntap-20210625-0002"},{"reference_url":"https://security.netapp.com/advisory/ntap-20210625-0002/","reference_id":"","reference_type":"","scores":[],"url":"https://security.netapp.com/advisory/ntap-20210625-0002/"},{"reference_url":"https://www.oracle.com/security-alerts/cpuapr2022.html","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujul2022.html","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpujul2022.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpuoct2021.html","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988123","reference_id":"988123","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988123"},{"reference_url":"https://security.archlinux.org/AVG-1883","reference_id":"AVG-1883","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1883"},{"reference_url":"https://github.com/advisories/GHSA-286v-pcf5-25rc","reference_id":"GHSA-286v-pcf5-25rc","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-286v-pcf5-25rc"},{"reference_url":"https://security.gentoo.org/glsa/202107-05","reference_id":"GLSA-202107-05","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.gentoo.org/glsa/202107-05"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:2569","reference_id":"RHSA-2021:2569","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:2569"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:1389","reference_id":"RHSA-2022:1389","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:1389"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:1390","reference_id":"RHSA-2022:1390","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:1390"},{"reference_url":"https://usn.ubuntu.com/4991-1/","reference_id":"USN-4991-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4991-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1050248?format=json","purl":"pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-62bb-e8vk-7uh4"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-d1ar-1945-sygd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-knx8-5fpz-zbgn"},{"vulnerability":"VCID-nj3a-zqw9-6bga"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.10%252Bdfsg-6.7%252Bdeb11u4"}],"aliases":["CVE-2021-3537","GHSA-286v-pcf5-25rc"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vf7b-s3y3-sfhw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/8947?format=json","vulnerability_id":"VCID-wc4g-sxyq-ubcd","summary":"Allocation of Resources Without Limits or Throttling\nThe xz_head function in xzlib.c in libxml2 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18258.json","reference_id":"","reference_type":"","scores":[{"value":"3.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18258.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-18258","reference_id":"","reference_type":"","scores":[{"value":"0.0079","scoring_system":"epss","scoring_elements":"0.73872","published_at":"2026-04-13T12:55:00Z"},{"value":"0.0079","scoring_system":"epss","scoring_elements":"0.7388","published_at":"2026-04-12T12:55:00Z"},{"value":"0.0079","scoring_system":"epss","scoring_elements":"0.73824","published_at":"2026-04-01T12:55:00Z"},{"value":"0.0079","scoring_system":"epss","scoring_elements":"0.73876","published_at":"2026-04-09T12:55:00Z"},{"value":"0.0079","scoring_system":"epss","scoring_elements":"0.73898","published_at":"2026-04-11T12:55:00Z"},{"value":"0.0079","scoring_system":"epss","scoring_elements":"0.73833","published_at":"2026-04-02T12:55:00Z"},{"value":"0.0079","scoring_system":"epss","scoring_elements":"0.73858","published_at":"2026-04-04T12:55:00Z"},{"value":"0.0079","scoring_system":"epss","scoring_elements":"0.73829","published_at":"2026-04-07T12:55:00Z"},{"value":"0.0079","scoring_system":"epss","scoring_elements":"0.73863","published_at":"2026-04-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-18258"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18258","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18258"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://git.gnome.org/browse/libxml2/commit/?id=e2a9122b8dde53d320750451e9907a7dcb2ca8bb","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3","scoring_elements":""},{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://git.gnome.org/browse/libxml2/commit/?id=e2a9122b8dde53d320750451e9907a7dcb2ca8bb"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2017-18258.yml","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2017-18258.yml"},{"reference_url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10284","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10284"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20190719-0001","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.netapp.com/advisory/ntap-20190719-0001"},{"reference_url":"https://security.netapp.com/advisory/ntap-20190719-0001/","reference_id":"","reference_type":"","scores":[],"url":"https://security.netapp.com/advisory/ntap-20190719-0001/"},{"reference_url":"https://usn.ubuntu.com/3739-1","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://usn.ubuntu.com/3739-1"},{"reference_url":"https://usn.ubuntu.com/3739-1/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3739-1/"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566749","reference_id":"1566749","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566749"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=895245","reference_id":"895245","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=895245"},{"reference_url":"https://security.archlinux.org/AVG-671","reference_id":"AVG-671","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-671"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18258","reference_id":"CVE-2017-18258","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18258"},{"reference_url":"https://github.com/advisories/GHSA-882p-jqgm-f45g","reference_id":"GHSA-882p-jqgm-f45g","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-882p-jqgm-f45g"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:1190","reference_id":"RHSA-2020:1190","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:1190"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1050248?format=json","purl":"pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-62bb-e8vk-7uh4"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-d1ar-1945-sygd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-knx8-5fpz-zbgn"},{"vulnerability":"VCID-nj3a-zqw9-6bga"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.10%252Bdfsg-6.7%252Bdeb11u4"}],"aliases":["CVE-2017-18258","GHSA-882p-jqgm-f45g"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wc4g-sxyq-ubcd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/81172?format=json","vulnerability_id":"VCID-wj66-7n6c-9kam","summary":"security update","references":[{"reference_url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","reference_id":"","reference_type":"","scores":[],"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1835.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1835.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-1835","reference_id":"","reference_type":"","scores":[{"value":"0.02568","scoring_system":"epss","scoring_elements":"0.85537","published_at":"2026-04-13T12:55:00Z"},{"value":"0.02568","scoring_system":"epss","scoring_elements":"0.8554","published_at":"2026-04-12T12:55:00Z"},{"value":"0.02568","scoring_system":"epss","scoring_elements":"0.85465","published_at":"2026-04-01T12:55:00Z"},{"value":"0.02568","scoring_system":"epss","scoring_elements":"0.85477","published_at":"2026-04-02T12:55:00Z"},{"value":"0.02568","scoring_system":"epss","scoring_elements":"0.85494","published_at":"2026-04-04T12:55:00Z"},{"value":"0.02568","scoring_system":"epss","scoring_elements":"0.85498","published_at":"2026-04-07T12:55:00Z"},{"value":"0.02568","scoring_system":"epss","scoring_elements":"0.85518","published_at":"2026-04-08T12:55:00Z"},{"value":"0.02568","scoring_system":"epss","scoring_elements":"0.85528","published_at":"2026-04-09T12:55:00Z"},{"value":"0.02568","scoring_system":"epss","scoring_elements":"0.85542","published_at":"2026-04-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-1835"},{"reference_url":"https://bugzilla.gnome.org/show_bug.cgi?id=759020","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.gnome.org/show_bug.cgi?id=759020"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483"},{"reference_url":"https://git.gnome.org/browse/libxml2/commit/?id=38eae571111db3b43ffdeb05487c9f60551906fb","reference_id":"","reference_type":"","scores":[],"url":"https://git.gnome.org/browse/libxml2/commit/?id=38eae571111db3b43ffdeb05487c9f60551906fb"},{"reference_url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","reference_id":"","reference_type":"","scores":[],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170"},{"reference_url":"https://support.apple.com/HT206567","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206567"},{"reference_url":"https://support.apple.com/HT206568","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206568"},{"reference_url":"https://www.debian.org/security/2016/dsa-3593","reference_id":"","reference_type":"","scores":[],"url":"https://www.debian.org/security/2016/dsa-3593"},{"reference_url":"https://www.tenable.com/security/tns-2016-18","reference_id":"","reference_type":"","scores":[],"url":"https://www.tenable.com/security/tns-2016-18"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"},{"reference_url":"http://www.securityfocus.com/bid/90696","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/90696"},{"reference_url":"http://www.securitytracker.com/id/1035890","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1035890"},{"reference_url":"http://www.ubuntu.com/usn/USN-2994-1","reference_id":"","reference_type":"","scores":[],"url":"http://www.ubuntu.com/usn/USN-2994-1"},{"reference_url":"http://xmlsoft.org/news.html","reference_id":"","reference_type":"","scores":[],"url":"http://xmlsoft.org/news.html"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338691","reference_id":"1338691","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338691"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1835","reference_id":"CVE-2016-1835","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:P"},{"value":"8.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1835"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:1292","reference_id":"RHSA-2016:1292","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:1292"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:2957","reference_id":"RHSA-2016:2957","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:2957"},{"reference_url":"https://usn.ubuntu.com/2994-1/","reference_id":"USN-2994-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2994-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"}],"aliases":["CVE-2016-1835"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"7.9","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wj66-7n6c-9kam"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7204?format=json","vulnerability_id":"VCID-wtxh-xxp2-d3hr","summary":"Improper Restriction of Operations within the Bounds of a Memory Buffer\nThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.","references":[{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html"},{"reference_url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html"},{"reference_url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html"},{"reference_url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html"},{"reference_url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html"},{"reference_url":"http://marc.info/?l=bugtraq&m=145382616617563&w=2","reference_id":"","reference_type":"","scores":[],"url":"http://marc.info/?l=bugtraq&m=145382616617563&w=2"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2015-2549.html","reference_id":"","reference_type":"","scores":[],"url":"http://rhn.redhat.com/errata/RHSA-2015-2549.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2015-2550.html","reference_id":"","reference_type":"","scores":[],"url":"http://rhn.redhat.com/errata/RHSA-2015-2550.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2016-1089.html","reference_id":"","reference_type":"","scores":[],"url":"http://rhn.redhat.com/errata/RHSA-2016-1089.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7942.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7942.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2015-7942","reference_id":"","reference_type":"","scores":[{"value":"0.01457","scoring_system":"epss","scoring_elements":"0.80821","published_at":"2026-04-13T12:55:00Z"},{"value":"0.01457","scoring_system":"epss","scoring_elements":"0.80765","published_at":"2026-04-01T12:55:00Z"},{"value":"0.01457","scoring_system":"epss","scoring_elements":"0.80774","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01457","scoring_system":"epss","scoring_elements":"0.80795","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01457","scoring_system":"epss","scoring_elements":"0.80792","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01457","scoring_system":"epss","scoring_elements":"0.80819","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01457","scoring_system":"epss","scoring_elements":"0.80827","published_at":"2026-04-09T12:55:00Z"},{"value":"0.01457","scoring_system":"epss","scoring_elements":"0.80844","published_at":"2026-04-11T12:55:00Z"},{"value":"0.01457","scoring_system":"epss","scoring_elements":"0.80829","published_at":"2026-04-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2015-7942"},{"reference_url":"https://bugzilla.gnome.org/show_bug.cgi?id=744980#c8","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.gnome.org/show_bug.cgi?id=744980#c8"},{"reference_url":"https://bugzilla.gnome.org/show_bug.cgi?id=756456","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.gnome.org/show_bug.cgi?id=756456"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1819","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1819"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5312","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5312"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7497","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7497"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7498","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7498"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7499","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7499"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7500","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7500"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8241","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8241"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8317","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8317"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8710","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8710"},{"reference_url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172","reference_id":"","reference_type":"","scores":[],"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172"},{"reference_url":"https://support.apple.com/HT206166","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206166"},{"reference_url":"https://support.apple.com/HT206167","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206167"},{"reference_url":"https://support.apple.com/HT206168","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206168"},{"reference_url":"https://support.apple.com/HT206169","reference_id":"","reference_type":"","scores":[],"url":"https://support.apple.com/HT206169"},{"reference_url":"http://www.debian.org/security/2015/dsa-3430","reference_id":"","reference_type":"","scores":[],"url":"http://www.debian.org/security/2015/dsa-3430"},{"reference_url":"http://www.openwall.com/lists/oss-security/2015/10/22/5","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2015/10/22/5"},{"reference_url":"http://www.openwall.com/lists/oss-security/2015/10/22/8","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2015/10/22/8"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"},{"reference_url":"http://www.securityfocus.com/bid/79507","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/79507"},{"reference_url":"http://www.securitytracker.com/id/1034243","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1034243"},{"reference_url":"http://www.ubuntu.com/usn/USN-2812-1","reference_id":"","reference_type":"","scores":[],"url":"http://www.ubuntu.com/usn/USN-2812-1"},{"reference_url":"http://xmlsoft.org/news.html","reference_id":"","reference_type":"","scores":[],"url":"http://xmlsoft.org/news.html"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1276297","reference_id":"1276297","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1276297"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802827","reference_id":"802827","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802827"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_file_manager:3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:hp:icewall_file_manager:3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_file_manager:3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.9.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.9.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.9.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7942","reference_id":"CVE-2015-7942","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:P"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7942"},{"reference_url":"https://security.gentoo.org/glsa/201701-37","reference_id":"GLSA-201701-37","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-37"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:2549","reference_id":"RHSA-2015:2549","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:2549"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:2550","reference_id":"RHSA-2015:2550","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:2550"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:1089","reference_id":"RHSA-2016:1089","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:1089"},{"reference_url":"https://usn.ubuntu.com/2812-1/","reference_id":"USN-2812-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2812-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"}],"aliases":["CVE-2015-7942"],"risk_score":3.0,"exploitability":"0.5","weighted_severity":"6.1","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wtxh-xxp2-d3hr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7387?format=json","vulnerability_id":"VCID-wy5v-dsp3-a7aa","summary":"Improper Input Validation\nThe xmlStringGetNodeList function in tree.c in libxml2, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html"},{"reference_url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3627.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3627.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-3627","reference_id":"","reference_type":"","scores":[{"value":"0.00163","scoring_system":"epss","scoring_elements":"0.37257","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00163","scoring_system":"epss","scoring_elements":"0.3732","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00163","scoring_system":"epss","scoring_elements":"0.37308","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00163","scoring_system":"epss","scoring_elements":"0.37239","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00163","scoring_system":"epss","scoring_elements":"0.37331","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00163","scoring_system":"epss","scoring_elements":"0.37298","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00163","scoring_system":"epss","scoring_elements":"0.37429","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00163","scoring_system":"epss","scoring_elements":"0.37405","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00163","scoring_system":"epss","scoring_elements":"0.3727","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-3627"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2073"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483"},{"reference_url":"http://seclists.org/fulldisclosure/2016/May/10","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"http://seclists.org/fulldisclosure/2016/May/10"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:N/I:N/A:P"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239"},{"reference_url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170"},{"reference_url":"https://www.debian.org/security/2016/dsa-3593","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"https://www.debian.org/security/2016/dsa-3593"},{"reference_url":"https://www.tenable.com/security/tns-2016-18","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"https://www.tenable.com/security/tns-2016-18"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/03/21/2","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"http://www.openwall.com/lists/oss-security/2016/03/21/2"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/03/21/3","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"http://www.openwall.com/lists/oss-security/2016/03/21/3"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"},{"reference_url":"http://www.securityfocus.com/bid/84992","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"http://www.securityfocus.com/bid/84992"},{"reference_url":"http://www.securitytracker.com/id/1035335","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"http://www.securitytracker.com/id/1035335"},{"reference_url":"http://www.ubuntu.com/usn/USN-2994-1","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"http://www.ubuntu.com/usn/USN-2994-1"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319829","reference_id":"1319829","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319829"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819006","reference_id":"819006","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819006"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_file_manager:3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:hp:icewall_file_manager:3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:icewall_file_manager:3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:vm_server:3.3:*:*:*:*:*:x86:*","reference_id":"cpe:2.3:a:oracle:vm_server:3.3:*:*:*:*:*:x86:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:vm_server:3.3:*:*:*:*:*:x86:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:vm_server:3.4:*:*:*:*:*:x86:*","reference_id":"cpe:2.3:a:oracle:vm_server:3.4:*:*:*:*:*:x86:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:vm_server:3.4:*:*:*:*:*:x86:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3627","reference_id":"CVE-2016-3627","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:N/A:P"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3627"},{"reference_url":"https://security.gentoo.org/glsa/201701-37","reference_id":"GLSA-201701-37","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"https://security.gentoo.org/glsa/201701-37"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:1292","reference_id":"RHSA-2016:1292","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-04T15:39:17Z/"}],"url":"https://access.redhat.com/errata/RHSA-2016:1292"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:2957","reference_id":"RHSA-2016:2957","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:2957"},{"reference_url":"https://usn.ubuntu.com/2994-1/","reference_id":"USN-2994-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2994-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"}],"aliases":["CVE-2016-3627"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wy5v-dsp3-a7aa"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/17375?format=json","vulnerability_id":"VCID-x9ej-7dcq-tub2","summary":"Double Free\nAn issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29469.json","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29469.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29469","reference_id":"","reference_type":"","scores":[{"value":"0.00072","scoring_system":"epss","scoring_elements":"0.2209","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00072","scoring_system":"epss","scoring_elements":"0.2196","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00072","scoring_system":"epss","scoring_elements":"0.2214","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00072","scoring_system":"epss","scoring_elements":"0.2191","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00072","scoring_system":"epss","scoring_elements":"0.21991","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00072","scoring_system":"epss","scoring_elements":"0.22046","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00072","scoring_system":"epss","scoring_elements":"0.22061","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00072","scoring_system":"epss","scoring_elements":"0.2202","published_at":"2026-04-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29469"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/510","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-04T21:02:27Z/"}],"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/510"},{"reference_url":"https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-04T21:02:27Z/"}],"url":"https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-04T21:02:27Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html"},{"reference_url":"https://nokogiri.org/CHANGELOG.html#1143-2023-04-11","reference_id":"","reference_type":"","scores":[],"url":"https://nokogiri.org/CHANGELOG.html#1143-2023-04-11"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034437","reference_id":"1034437","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034437"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185984","reference_id":"2185984","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185984"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29469","reference_id":"CVE-2023-29469","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29469"},{"reference_url":"https://security.gentoo.org/glsa/202402-11","reference_id":"GLSA-202402-11","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202402-11"},{"reference_url":"https://security.netapp.com/advisory/ntap-20230601-0006/","reference_id":"ntap-20230601-0006","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-04T21:02:27Z/"}],"url":"https://security.netapp.com/advisory/ntap-20230601-0006/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:4349","reference_id":"RHSA-2023:4349","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:4349"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:4529","reference_id":"RHSA-2023:4529","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:4529"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:4628","reference_id":"RHSA-2023:4628","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:4628"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:0413","reference_id":"RHSA-2024:0413","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:0413"},{"reference_url":"https://usn.ubuntu.com/6028-1/","reference_id":"USN-6028-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6028-1/"},{"reference_url":"https://usn.ubuntu.com/6028-2/","reference_id":"USN-6028-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6028-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1050248?format=json","purl":"pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-62bb-e8vk-7uh4"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-d1ar-1945-sygd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-knx8-5fpz-zbgn"},{"vulnerability":"VCID-nj3a-zqw9-6bga"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.10%252Bdfsg-6.7%252Bdeb11u4"}],"aliases":["CVE-2023-29469"],"risk_score":3.0,"exploitability":"0.5","weighted_severity":"5.9","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-x9ej-7dcq-tub2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/44701?format=json","vulnerability_id":"VCID-xps8-1a3r-wke6","summary":"Multiple vulnerabilities have been found in libxml2, the worst of\n which could result in a Denial of Service condition.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3516.json","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3516.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3516","reference_id":"","reference_type":"","scores":[{"value":"0.00343","scoring_system":"epss","scoring_elements":"0.56934","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00343","scoring_system":"epss","scoring_elements":"0.56985","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00343","scoring_system":"epss","scoring_elements":"0.56988","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00343","scoring_system":"epss","scoring_elements":"0.56995","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00353","scoring_system":"epss","scoring_elements":"0.57651","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00353","scoring_system":"epss","scoring_elements":"0.57629","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00353","scoring_system":"epss","scoring_elements":"0.57545","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00362","scoring_system":"epss","scoring_elements":"0.58347","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00362","scoring_system":"epss","scoring_elements":"0.58327","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3516"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3516","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3516"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/230","reference_id":"","reference_type":"","scores":[],"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/230"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954225","reference_id":"1954225","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954225"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987739","reference_id":"987739","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987739"},{"reference_url":"https://security.archlinux.org/AVG-1883","reference_id":"AVG-1883","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1883"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3516","reference_id":"CVE-2021-3516","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3516"},{"reference_url":"https://security.gentoo.org/glsa/202107-05","reference_id":"GLSA-202107-05","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202107-05"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:2569","reference_id":"RHSA-2021:2569","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:2569"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:1389","reference_id":"RHSA-2022:1389","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:1389"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:1390","reference_id":"RHSA-2022:1390","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:1390"},{"reference_url":"https://usn.ubuntu.com/4991-1/","reference_id":"USN-4991-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4991-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1050248?format=json","purl":"pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-62bb-e8vk-7uh4"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-d1ar-1945-sygd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-knx8-5fpz-zbgn"},{"vulnerability":"VCID-nj3a-zqw9-6bga"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.10%252Bdfsg-6.7%252Bdeb11u4"}],"aliases":["CVE-2021-3516"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-xps8-1a3r-wke6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7951?format=json","vulnerability_id":"VCID-ymhr-ads4-qqdp","summary":"Out-of-bounds Read\nlibxml2 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9049.json","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9049.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-9049","reference_id":"","reference_type":"","scores":[{"value":"0.00458","scoring_system":"epss","scoring_elements":"0.63902","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00458","scoring_system":"epss","scoring_elements":"0.63985","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00458","scoring_system":"epss","scoring_elements":"0.63961","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00458","scoring_system":"epss","scoring_elements":"0.63989","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00458","scoring_system":"epss","scoring_elements":"0.63948","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00458","scoring_system":"epss","scoring_elements":"0.63999","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00458","scoring_system":"epss","scoring_elements":"0.64016","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00458","scoring_system":"epss","scoring_elements":"0.64028","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00458","scoring_system":"epss","scoring_elements":"0.64014","published_at":"2026-04-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-9049"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7375","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7375"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7376","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7376"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:N/A:P"},{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452556","reference_id":"1452556","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452556"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863019","reference_id":"863019","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863019"},{"reference_url":"http://www.securityfocus.com/bid/98601","reference_id":"98601","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:20:28Z/"}],"url":"http://www.securityfocus.com/bid/98601"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9049","reference_id":"CVE-2017-9049","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9049"},{"reference_url":"https://usn.ubuntu.com/3424-1/","reference_id":"USN-3424-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3424-1/"},{"reference_url":"https://usn.ubuntu.com/3424-2/","reference_id":"USN-3424-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3424-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"},{"url":"http://public2.vulnerablecode.io/api/packages/1038282?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-7%2Bdeb10u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-7%252Bdeb10u4"}],"aliases":["CVE-2017-9049"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ymhr-ads4-qqdp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7953?format=json","vulnerability_id":"VCID-zm21-2pqq-3ker","summary":"Out-of-bounds Read\nlibxml2 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9050.json","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9050.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-9050","reference_id":"","reference_type":"","scores":[{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54468","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54489","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54506","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54494","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.545","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54448","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54479","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54457","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54378","published_at":"2026-04-01T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-9050"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7375","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7375"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7376","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7376"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:N/A:P"},{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/sparklemotion/nokogiri/issues/1673","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":""}],"url":"https://github.com/sparklemotion/nokogiri/issues/1673"},{"reference_url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E"},{"reference_url":"https://security.gentoo.org/glsa/201711-01","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-17T22:10:54Z/"}],"url":"https://security.gentoo.org/glsa/201711-01"},{"reference_url":"http://www.debian.org/security/2017/dsa-3952","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-17T22:10:54Z/"}],"url":"http://www.debian.org/security/2017/dsa-3952"},{"reference_url":"http://www.openwall.com/lists/oss-security/2017/05/15/1","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-17T22:10:54Z/"}],"url":"http://www.openwall.com/lists/oss-security/2017/05/15/1"},{"reference_url":"http://www.securityfocus.com/bid/98568","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-17T22:10:54Z/"}],"url":"http://www.securityfocus.com/bid/98568"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452553","reference_id":"1452553","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452553"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863018","reference_id":"863018","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863018"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9050","reference_id":"CVE-2017-9050","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9050"},{"reference_url":"https://github.com/advisories/GHSA-8c56-cpmw-89x7","reference_id":"GHSA-8c56-cpmw-89x7","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-8c56-cpmw-89x7"},{"reference_url":"https://usn.ubuntu.com/3424-1/","reference_id":"USN-3424-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3424-1/"},{"reference_url":"https://usn.ubuntu.com/3424-2/","reference_id":"USN-3424-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3424-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1035584?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5%2Bdeb8u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5%252Bdeb8u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1036961?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-2.2%2Bdeb9u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-2.2%252Bdeb9u2"},{"url":"http://public2.vulnerablecode.io/api/packages/1038282?format=json","purl":"pkg:deb/debian/libxml2@2.9.4%2Bdfsg1-7%2Bdeb10u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.4%252Bdfsg1-7%252Bdeb10u4"}],"aliases":["CVE-2017-9050","GHSA-8c56-cpmw-89x7"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zm21-2pqq-3ker"}],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/51193?format=json","vulnerability_id":"VCID-mhwv-kcxp-buc7","summary":"A vulnerability in libxml2 allows a remote attacker to cause Denial\n of Service.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0191.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0191.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0191","reference_id":"","reference_type":"","scores":[{"value":"0.00845","scoring_system":"epss","scoring_elements":"0.74775","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00845","scoring_system":"epss","scoring_elements":"0.74767","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00845","scoring_system":"epss","scoring_elements":"0.74782","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00845","scoring_system":"epss","scoring_elements":"0.74806","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00845","scoring_system":"epss","scoring_elements":"0.74785","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00845","scoring_system":"epss","scoring_elements":"0.74735","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00868","scoring_system":"epss","scoring_elements":"0.75122","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00868","scoring_system":"epss","scoring_elements":"0.75152","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00868","scoring_system":"epss","scoring_elements":"0.75119","published_at":"2026-04-01T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0191"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0191","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0191"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:N/I:N/A:C"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090976","reference_id":"1090976","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090976"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747309","reference_id":"747309","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747309"},{"reference_url":"https://security.gentoo.org/glsa/201409-08","reference_id":"GLSA-201409-08","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201409-08"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0513","reference_id":"RHSA-2014:0513","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0513"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:0749","reference_id":"RHSA-2015:0749","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:0749"},{"reference_url":"https://usn.ubuntu.com/2214-1/","reference_id":"USN-2214-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2214-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/571049?format=json","purl":"pkg:deb/debian/libxml2@2.8.0%2Bdfsg1-7%2Bwheezy5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mhwv-kcxp-buc7"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nrut-syek-s7fg"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.8.0%252Bdfsg1-7%252Bwheezy5"},{"url":"http://public2.vulnerablecode.io/api/packages/1035583?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5"}],"aliases":["CVE-2014-0191"],"risk_score":1.8,"exploitability":"0.5","weighted_severity":"3.5","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mhwv-kcxp-buc7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6833?format=json","vulnerability_id":"VCID-nrut-syek-s7fg","summary":"Improper Restriction of Operations within the Bounds of a Memory Buffer\nparser.c in libxml2, as used in Google Chrome and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.","references":[{"reference_url":"ftp://xmlsoft.org/libxml2/libxml2-2.9.0.tar.gz","reference_id":"","reference_type":"","scores":[],"url":"ftp://xmlsoft.org/libxml2/libxml2-2.9.0.tar.gz"},{"reference_url":"http://git.chromium.org/gitweb/?p=chromium/chromium.git%3Ba=commit%3Bh=e5d7f7e5dc21d3ae7be3cbb949ac4d8701e06de1","reference_id":"","reference_type":"","scores":[],"url":"http://git.chromium.org/gitweb/?p=chromium/chromium.git%3Ba=commit%3Bh=e5d7f7e5dc21d3ae7be3cbb949ac4d8701e06de1"},{"reference_url":"http://googlechromereleases.blogspot.com/2013/07/stable-channel-update.html","reference_id":"","reference_type":"","scores":[],"url":"http://googlechromereleases.blogspot.com/2013/07/stable-channel-update.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html"},{"reference_url":"http://lists.opensuse.org/opensuse-updates/2013-07/msg00063.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-updates/2013-07/msg00063.html"},{"reference_url":"http://lists.opensuse.org/opensuse-updates/2013-07/msg00077.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-updates/2013-07/msg00077.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2877.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2877.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2013-2877","reference_id":"","reference_type":"","scores":[{"value":"0.00628","scoring_system":"epss","scoring_elements":"0.70239","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00628","scoring_system":"epss","scoring_elements":"0.70229","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00628","scoring_system":"epss","scoring_elements":"0.70244","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00628","scoring_system":"epss","scoring_elements":"0.70267","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00628","scoring_system":"epss","scoring_elements":"0.70252","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00628","scoring_system":"epss","scoring_elements":"0.70183","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00646","scoring_system":"epss","scoring_elements":"0.70648","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00646","scoring_system":"epss","scoring_elements":"0.70667","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00646","scoring_system":"epss","scoring_elements":"0.70633","published_at":"2026-04-01T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2013-2877"},{"reference_url":"https://code.google.com/p/chromium/issues/detail?id=229019","reference_id":"","reference_type":"","scores":[],"url":"https://code.google.com/p/chromium/issues/detail?id=229019"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2853","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2853"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2867","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2867"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2868","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2868"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2869","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2869"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2870","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2870"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2871","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2871"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2873","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2873"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2875","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2875"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2876","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2876"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2877","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2877"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2878","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2878"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2879","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2879"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2880","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2880"},{"reference_url":"http://seclists.org/fulldisclosure/2014/Dec/23","reference_id":"","reference_type":"","scores":[],"url":"http://seclists.org/fulldisclosure/2014/Dec/23"},{"reference_url":"http://secunia.com/advisories/54172","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/54172"},{"reference_url":"http://secunia.com/advisories/55568","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/55568"},{"reference_url":"http://www.debian.org/security/2013/dsa-2724","reference_id":"","reference_type":"","scores":[],"url":"http://www.debian.org/security/2013/dsa-2724"},{"reference_url":"http://www.debian.org/security/2013/dsa-2779","reference_id":"","reference_type":"","scores":[],"url":"http://www.debian.org/security/2013/dsa-2779"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"},{"reference_url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded"},{"reference_url":"http://www.securityfocus.com/bid/61050","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/61050"},{"reference_url":"http://www.ubuntu.com/usn/USN-1904-1","reference_id":"","reference_type":"","scores":[],"url":"http://www.ubuntu.com/usn/USN-1904-1"},{"reference_url":"http://www.ubuntu.com/usn/USN-1904-2","reference_id":"","reference_type":"","scores":[],"url":"http://www.ubuntu.com/usn/USN-1904-2"},{"reference_url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=715531","reference_id":"715531","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=715531"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=983204","reference_id":"983204","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=983204"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.11:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.11:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.11:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.12:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.12:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.12:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.13:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.13:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.13:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.14:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.14:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.14:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.15:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.15:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.15:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.16:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.16:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.16:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.17:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.17:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.17:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.18:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.18:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.18:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.19:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.19:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.19:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.20:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.20:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.20:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.21:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.21:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.21:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.22:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.22:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.22:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.23:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.23:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.23:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.24:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.24:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.24:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.25:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.25:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.25:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.26:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.26:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.26:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.27:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.27:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.27:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.28:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.28:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.28:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.29:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.29:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.29:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.31:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.31:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.31:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.32:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.32:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.32:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.33:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.33:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.33:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.34:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.34:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.34:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.35:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.35:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.35:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.36:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.36:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.36:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.37:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.37:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.37:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.38:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.38:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.38:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.39:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.39:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.39:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.40:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.40:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.40:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.41:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.41:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.41:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.42:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.42:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.42:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.43:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.43:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.43:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.44:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.44:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.44:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.45:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.45:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.45:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.46:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.46:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.46:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.47:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.47:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.47:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.48:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.48:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.48:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.49:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.49:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.49:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.50:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.50:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.50:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.51:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.51:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.51:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.52:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.52:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.52:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.53:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.53:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.53:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.54:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.54:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.54:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.56:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.56:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.56:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.58:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.58:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.58:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.59:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.59:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.59:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.60:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.60:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.60:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.61:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.61:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.61:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.62:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.62:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.62:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.63:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.63:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.63:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.64:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.64:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.64:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.66:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.66:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.66:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.68:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.68:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.68:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.8:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.8:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.8:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.9:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:google:chrome:28.0.1500.9:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:28.0.1500.9:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.7.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.7.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.7.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.7.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.7.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.7.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.7.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.7.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.7.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.7.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.7.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.7.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.13:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.13:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.13:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.14:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.14:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.14:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.16:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.16:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.16:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.9:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:1.8.9:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:1.8.9:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.0.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.0.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.0.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.1.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.1.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.1.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.1.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.1.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.1.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.0:beta:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.0:beta:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.0:beta:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.11:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.11:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.11:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.8:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.8:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.8:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.9:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.2.9:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.2.9:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.11:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.11:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.11:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.12:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.12:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.12:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.13:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.13:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.13:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.14:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.14:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.14:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.8:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.8:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.8:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.9:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.3.9:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.3.9:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.11:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.11:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.11:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.12:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.12:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.12:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.13:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.13:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.13:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.14:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.14:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.14:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.15:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.15:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.15:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.16:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.16:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.16:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.17:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.17:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.17:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.18:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.18:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.18:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.19:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.19:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.19:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.20:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.20:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.20:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.21:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.21:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.21:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.22:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.22:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.22:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.23:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.23:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.23:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.24:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.24:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.24:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.25:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.25:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.25:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.26:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.26:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.26:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.27:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.27:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.27:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.28:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.28:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.28:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.29:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.29:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.29:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.30:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.30:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.30:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.8:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.8:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.8:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.9:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.4.9:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.4.9:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.5.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.5.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.5.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.5.11:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.5.11:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.5.11:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.5.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.5.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.5.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.5.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.5.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.5.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.5.8:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.5.8:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.5.8:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.11:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.11:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.11:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.12:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.12:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.12:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.13:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.13:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.13:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.14:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.14:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.14:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.17:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.17:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.17:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.18:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.18:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.18:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.20:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.20:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.20:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.21:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.21:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.21:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.22:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.22:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.22:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.23:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.23:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.23:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.24:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.24:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.24:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.25:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.25:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.25:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.28:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.28:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.28:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.29:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.29:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.29:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.30:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.30:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.30:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.31:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.31:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.31:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.8:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.8:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.8:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.9:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.6.9:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.6.9:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.7.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.7.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.7.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.7.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.7.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.7.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.7.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.7.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.8:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.7.8:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.7.8:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:2.8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:2.8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:rc1:*:*:*:*:*:*","reference_id":"cpe:2.3:a:xmlsoft:libxml2:*:rc1:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xmlsoft:libxml2:*:rc1:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2877","reference_id":"CVE-2013-2877","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:N/A:P"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2877"},{"reference_url":"https://security.gentoo.org/glsa/201309-16","reference_id":"GLSA-201309-16","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201309-16"},{"reference_url":"https://security.gentoo.org/glsa/201311-06","reference_id":"GLSA-201311-06","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201311-06"},{"reference_url":"https://security.gentoo.org/glsa/201412-11","reference_id":"GLSA-201412-11","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201412-11"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0513","reference_id":"RHSA-2014:0513","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0513"},{"reference_url":"https://usn.ubuntu.com/1904-1/","reference_id":"USN-1904-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1904-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/571049?format=json","purl":"pkg:deb/debian/libxml2@2.8.0%2Bdfsg1-7%2Bwheezy5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mhwv-kcxp-buc7"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nrut-syek-s7fg"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.8.0%252Bdfsg1-7%252Bwheezy5"},{"url":"http://public2.vulnerablecode.io/api/packages/1035583?format=json","purl":"pkg:deb/debian/libxml2@2.9.1%2Bdfsg1-5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-27jd-t23h-73f4"},{"vulnerability":"VCID-2b1g-gp84-87e8"},{"vulnerability":"VCID-2j62-5rjn-vyeu"},{"vulnerability":"VCID-31w8-13b6-8beh"},{"vulnerability":"VCID-33n1-125n-63h6"},{"vulnerability":"VCID-3d1e-enaq-q3cx"},{"vulnerability":"VCID-3s4n-twju-b3dw"},{"vulnerability":"VCID-3whx-6t3e-7beq"},{"vulnerability":"VCID-464a-typa-7qbu"},{"vulnerability":"VCID-4hws-gtxr-3bge"},{"vulnerability":"VCID-4m3j-qy8c-4uhk"},{"vulnerability":"VCID-51f2-w9b7-9fb4"},{"vulnerability":"VCID-57yv-ay7b-v7ev"},{"vulnerability":"VCID-69ff-ngna-mkbv"},{"vulnerability":"VCID-6h9f-6pmg-3fh3"},{"vulnerability":"VCID-74y5-vcxn-2ygr"},{"vulnerability":"VCID-782a-uast-nbch"},{"vulnerability":"VCID-7bpp-2hvk-2udv"},{"vulnerability":"VCID-7h3p-7ej2-17f1"},{"vulnerability":"VCID-7rzw-9jj5-4ybk"},{"vulnerability":"VCID-8d2w-3c3p-zqaz"},{"vulnerability":"VCID-8tej-h12t-2fag"},{"vulnerability":"VCID-9hqf-12yh-bkc8"},{"vulnerability":"VCID-9p2f-ynzb-r3gj"},{"vulnerability":"VCID-9q49-2srz-rkg7"},{"vulnerability":"VCID-aasn-u7fd-8bhy"},{"vulnerability":"VCID-ah8e-sxuu-jqcw"},{"vulnerability":"VCID-ahha-vnq4-7qd2"},{"vulnerability":"VCID-azzy-m5pc-qudn"},{"vulnerability":"VCID-b5tz-9s1v-pkg7"},{"vulnerability":"VCID-bejh-22y7-kuh6"},{"vulnerability":"VCID-bk98-bfkg-7bdt"},{"vulnerability":"VCID-bp8r-8jjt-hygw"},{"vulnerability":"VCID-bz1e-1ypb-kkgg"},{"vulnerability":"VCID-c9ds-faa9-t7be"},{"vulnerability":"VCID-cbm2-cez4-bqgh"},{"vulnerability":"VCID-cgfv-pps6-6khd"},{"vulnerability":"VCID-d68t-f8j1-h3am"},{"vulnerability":"VCID-drkd-yykc-ayge"},{"vulnerability":"VCID-e9c3-5gws-u3fp"},{"vulnerability":"VCID-eb6k-ppfd-m7a3"},{"vulnerability":"VCID-ecde-c15q-ukh1"},{"vulnerability":"VCID-eebz-xjem-cygz"},{"vulnerability":"VCID-ek5d-m9pn-3fec"},{"vulnerability":"VCID-ghaf-ynsg-uuea"},{"vulnerability":"VCID-gvmn-4dtv-8qcj"},{"vulnerability":"VCID-gxsm-qvkt-gygy"},{"vulnerability":"VCID-hafa-bcpu-8uaj"},{"vulnerability":"VCID-ked7-5tjg-nudx"},{"vulnerability":"VCID-mm88-amve-quh6"},{"vulnerability":"VCID-netm-9gxh-3yh4"},{"vulnerability":"VCID-nuh8-qd25-ykan"},{"vulnerability":"VCID-pdv9-xrh8-d3fz"},{"vulnerability":"VCID-qh44-gavt-rbdw"},{"vulnerability":"VCID-qp6y-dt1j-97df"},{"vulnerability":"VCID-qpnt-xvgv-s3cq"},{"vulnerability":"VCID-qqte-z1e6-xuh7"},{"vulnerability":"VCID-qtp3-a1g7-8kgw"},{"vulnerability":"VCID-qv3r-ppuc-zycz"},{"vulnerability":"VCID-qxwq-xwaw-nyak"},{"vulnerability":"VCID-r7q9-7u4b-83cz"},{"vulnerability":"VCID-rhgj-t5cp-wkbh"},{"vulnerability":"VCID-rsvx-3f49-v3an"},{"vulnerability":"VCID-s3j9-1zq5-zkf5"},{"vulnerability":"VCID-s9r4-a3uz-4yhp"},{"vulnerability":"VCID-t53m-6vvr-27cf"},{"vulnerability":"VCID-t9pa-yw9s-kqb9"},{"vulnerability":"VCID-tazr-2qgq-77fy"},{"vulnerability":"VCID-tn87-vke6-kuf6"},{"vulnerability":"VCID-tyk2-gq2c-bbcn"},{"vulnerability":"VCID-udew-3gre-13hy"},{"vulnerability":"VCID-ugyh-dycm-3bc3"},{"vulnerability":"VCID-vcq9-93xd-nfbe"},{"vulnerability":"VCID-vf7b-s3y3-sfhw"},{"vulnerability":"VCID-wc4g-sxyq-ubcd"},{"vulnerability":"VCID-wj66-7n6c-9kam"},{"vulnerability":"VCID-wtxh-xxp2-d3hr"},{"vulnerability":"VCID-wy5v-dsp3-a7aa"},{"vulnerability":"VCID-x9ej-7dcq-tub2"},{"vulnerability":"VCID-xps8-1a3r-wke6"},{"vulnerability":"VCID-ymhr-ads4-qqdp"},{"vulnerability":"VCID-zm21-2pqq-3ker"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5"}],"aliases":["CVE-2013-2877"],"risk_score":2.2,"exploitability":"0.5","weighted_severity":"4.5","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nrut-syek-s7fg"}],"risk_score":"10.0","resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.1%252Bdfsg1-5"}