{"url":"http://public2.vulnerablecode.io/api/packages/121199?format=json","purl":"pkg:apk/alpine/libexif@0.6.21-r0?arch=x86&distroversion=v3.13&reponame=community","type":"apk","namespace":"alpine","name":"libexif","version":"0.6.21-r0","qualifiers":{"arch":"x86","distroversion":"v3.13","reponame":"community"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"0.6.21-r3","latest_non_vulnerable_version":"0.6.22-r0","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179968?format=json","vulnerability_id":"VCID-2pkw-xkdc-73ct","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2837.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2837.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2837","reference_id":"","reference_type":"","scores":[{"value":"0.01256","scoring_system":"epss","scoring_elements":"0.7979","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2837"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2837","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2837"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839185","reference_id":"839185","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839185"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/121199?format=json","purl":"pkg:apk/alpine/libexif@0.6.21-r0?arch=x86&distroversion=v3.13&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libexif@0.6.21-r0%3Farch=x86&distroversion=v3.13&reponame=community"}],"aliases":["CVE-2012-2837"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2pkw-xkdc-73ct"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179964?format=json","vulnerability_id":"VCID-3q3m-95pg-tqgw","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2812.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2812.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2812","reference_id":"","reference_type":"","scores":[{"value":"0.00928","scoring_system":"epss","scoring_elements":"0.76533","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2812"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2812","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2812"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839203","reference_id":"839203","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839203"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/121199?format=json","purl":"pkg:apk/alpine/libexif@0.6.21-r0?arch=x86&distroversion=v3.13&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libexif@0.6.21-r0%3Farch=x86&distroversion=v3.13&reponame=community"}],"aliases":["CVE-2012-2812"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3q3m-95pg-tqgw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179969?format=json","vulnerability_id":"VCID-fkxf-pzuc-4yda","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2840.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2840.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2840","reference_id":"","reference_type":"","scores":[{"value":"0.02397","scoring_system":"epss","scoring_elements":"0.85377","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2840"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2840","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2840"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839188","reference_id":"839188","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839188"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/121199?format=json","purl":"pkg:apk/alpine/libexif@0.6.21-r0?arch=x86&distroversion=v3.13&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libexif@0.6.21-r0%3Farch=x86&distroversion=v3.13&reponame=community"}],"aliases":["CVE-2012-2840"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fkxf-pzuc-4yda"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179971?format=json","vulnerability_id":"VCID-vdqk-rcum-f7ff","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2845.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2845.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2845","reference_id":"","reference_type":"","scores":[{"value":"0.00624","scoring_system":"epss","scoring_elements":"0.7065","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2845"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2845","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2845"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681465","reference_id":"681465","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681465"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=840002","reference_id":"840002","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=840002"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/121199?format=json","purl":"pkg:apk/alpine/libexif@0.6.21-r0?arch=x86&distroversion=v3.13&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libexif@0.6.21-r0%3Farch=x86&distroversion=v3.13&reponame=community"}],"aliases":["CVE-2012-2845"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vdqk-rcum-f7ff"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libexif@0.6.21-r0%3Farch=x86&distroversion=v3.13&reponame=community"}