Lookup for vulnerable packages by Package URL.

GET /api/packages/125991?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/125991?format=api",
    "purl": "pkg:rpm/redhat/php@5.3.3-14?arch=el6_3",
    "type": "rpm",
    "namespace": "redhat",
    "name": "php",
    "version": "5.3.3-14",
    "qualifiers": {
        "arch": "el6_3"
    },
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": null,
    "latest_non_vulnerable_version": null,
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49115?format=api",
            "vulnerability_id": "VCID-2pjr-p6ge-nfa9",
            "summary": "Multiple vulnerabilities were found in PHP, the worst of which lead\n    to remote execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1172.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1172.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-1172",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93688",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93698",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93708",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93711",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9372",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93722",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93726",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93727",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93744",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93751",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93754",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93758",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93755",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93764",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93775",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.1185",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93784",
                            "published_at": "2026-05-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-1172"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=799187",
                    "reference_id": "799187",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=799187"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201209-03",
                    "reference_id": "GLSA-201209-03",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201209-03"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1045",
                    "reference_id": "RHSA-2012:1045",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1045"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1046",
                    "reference_id": "RHSA-2012:1046",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1046"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1047",
                    "reference_id": "RHSA-2012:1047",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1047"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1481-1/",
                    "reference_id": "USN-1481-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1481-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-1172"
            ],
            "risk_score": 0.1,
            "exploitability": "0.5",
            "weighted_severity": "0.1",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2pjr-p6ge-nfa9"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3619?format=api",
            "vulnerability_id": "VCID-35a3-5eq3-8bep",
            "summary": "Passwords containing the byte 0x80 passed to the crypt() function in pgcrypto are incorrectly truncated if DES encryption was usedmore details",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2143.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2143.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2143",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86493",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86503",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86522",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86521",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86541",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8655",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86565",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86562",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86555",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86569",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86574",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86567",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86585",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86594",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86593",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86614",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86632",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.02995",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86649",
                            "published_at": "2026-05-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2143"
                },
                {
                    "reference_url": "https://www.postgresql.org/support/security/CVE-2012-2143/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://www.postgresql.org/support/security/CVE-2012-2143/"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=816956",
                    "reference_id": "816956",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=816956"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201209-03",
                    "reference_id": "GLSA-201209-03",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201209-03"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201209-24",
                    "reference_id": "GLSA-201209-24",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201209-24"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1036",
                    "reference_id": "RHSA-2012:1036",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1036"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1037",
                    "reference_id": "RHSA-2012:1037",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1037"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1046",
                    "reference_id": "RHSA-2012:1046",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1046"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1047",
                    "reference_id": "RHSA-2012:1047",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1047"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1461-1/",
                    "reference_id": "USN-1461-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1461-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1481-1/",
                    "reference_id": "USN-1481-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1481-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-2143"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-35a3-5eq3-8bep"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49110?format=api",
            "vulnerability_id": "VCID-3zy4-mx5a-yqbs",
            "summary": "Multiple vulnerabilities were found in PHP, the worst of which lead\n    to remote execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0057.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0057.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0057",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81571",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81582",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81603",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81601",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81628",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81633",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81654",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8164",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81634",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81672",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81676",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81699",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81708",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81713",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81731",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81752",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.0159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81776",
                            "published_at": "2026-05-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0057"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=782657",
                    "reference_id": "782657",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=782657"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201209-03",
                    "reference_id": "GLSA-201209-03",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201209-03"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1045",
                    "reference_id": "RHSA-2012:1045",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1045"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1046",
                    "reference_id": "RHSA-2012:1046",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1046"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1047",
                    "reference_id": "RHSA-2012:1047",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1047"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1358-1/",
                    "reference_id": "USN-1358-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1358-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0057"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3zy4-mx5a-yqbs"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/87170?format=api",
            "vulnerability_id": "VCID-dd63-8v57-afad",
            "summary": "php: tidy_diagnose() NULL pointer dereference may cause DoS",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0781.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0781.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0781",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.04269",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8889",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.04269",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88902",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88999",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89002",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8902",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89025",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89037",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89032",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89029",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88975",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89042",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89038",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89055",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89062",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89065",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89072",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89043",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.04421",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88982",
                            "published_at": "2026-04-02T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0781"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=782951",
                    "reference_id": "782951",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=782951"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1046",
                    "reference_id": "RHSA-2012:1046",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1046"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1481-1/",
                    "reference_id": "USN-1481-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1481-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0781"
            ],
            "risk_score": null,
            "exploitability": "2.0",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dd63-8v57-afad"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49120?format=api",
            "vulnerability_id": "VCID-hzpu-97n9-jqaa",
            "summary": "Multiple vulnerabilities were found in PHP, the worst of which lead\n    to remote execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2386.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2386.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2386",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96478",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96487",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96491",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96495",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96503",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96506",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96509",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96512",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96518",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96524",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96523",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96525",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96532",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96533",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.28352",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96539",
                            "published_at": "2026-05-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2386"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=823594",
                    "reference_id": "823594",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=823594"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201209-03",
                    "reference_id": "GLSA-201209-03",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201209-03"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/17201.php",
                    "reference_id": "OSVDB-72399;CVE-2012-2386",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/17201.php"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1046",
                    "reference_id": "RHSA-2012:1046",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1046"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1047",
                    "reference_id": "RHSA-2012:1047",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1047"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1481-1/",
                    "reference_id": "USN-1481-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1481-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-2386"
            ],
            "risk_score": 0.6,
            "exploitability": "2.0",
            "weighted_severity": "0.3",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hzpu-97n9-jqaa"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/87169?format=api",
            "vulnerability_id": "VCID-krz2-adgm-kqe1",
            "summary": "php: zend_strndup() NULL pointer dereference may cause DoS",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4153.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4153.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4153",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.06262",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90985",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.06262",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90999",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91049",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91058",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91071",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91077",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91086",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91035",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91113",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91127",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91124",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9112",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91134",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9111",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.06479",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9104",
                            "published_at": "2026-04-02T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4153"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=782943",
                    "reference_id": "782943",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=782943"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/18370.txt",
                    "reference_id": "CVE-2012-0781;OSVDB-78571;OSVDB-78570;CVE-2011-4153",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/18370.txt"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1045",
                    "reference_id": "RHSA-2012:1045",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1045"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1046",
                    "reference_id": "RHSA-2012:1046",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1046"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1047",
                    "reference_id": "RHSA-2012:1047",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1047"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1358-1/",
                    "reference_id": "USN-1358-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1358-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2011-4153"
            ],
            "risk_score": 0.2,
            "exploitability": "2.0",
            "weighted_severity": "0.1",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-krz2-adgm-kqe1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/46883?format=api",
            "vulnerability_id": "VCID-usmw-6d5u-tba8",
            "summary": "Multiple vulnerabilities were found in PHP, the worst of which\n    leading to remote execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html"
                },
                {
                    "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html"
                },
                {
                    "reference_url": "http://marc.info/?l=bugtraq&m=130331363227777&w=2",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://marc.info/?l=bugtraq&m=130331363227777&w=2"
                },
                {
                    "reference_url": "http://php-security.org/2010/05/14/mops-2010-024-php-phar_stream_flush-format-string-vulnerability/index.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://php-security.org/2010/05/14/mops-2010-024-php-phar_stream_flush-format-string-vulnerability/index.html"
                },
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2950.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2950.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2010-2950",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71538",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71339",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71346",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71364",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71338",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71379",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71392",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71415",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.714",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71382",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71429",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71434",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71414",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71466",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71473",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71478",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.00673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.71502",
                            "published_at": "2026-05-07T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-2950"
                },
                {
                    "reference_url": "http://security-tracker.debian.org/tracker/CVE-2010-2950",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://security-tracker.debian.org/tracker/CVE-2010-2950"
                },
                {
                    "reference_url": "http://support.apple.com/kb/HT4581",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://support.apple.com/kb/HT4581"
                },
                {
                    "reference_url": "http://svn.php.net/viewvc?view=revision&revision=302565",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://svn.php.net/viewvc?view=revision&revision=302565"
                },
                {
                    "reference_url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:254",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:254"
                },
                {
                    "reference_url": "http://www.php.net/archive/2010.php#id2010-12-10-1",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.php.net/archive/2010.php#id2010-12-10-1"
                },
                {
                    "reference_url": "http://www.php.net/ChangeLog-5.php",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.php.net/ChangeLog-5.php"
                },
                {
                    "reference_url": "http://www.php.net/releases/5_3_4.php",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.php.net/releases/5_3_4.php"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=835024",
                    "reference_id": "835024",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=835024"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2950",
                    "reference_id": "CVE-2010-2950",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.8",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:P/A:P"
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2950"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201110-06",
                    "reference_id": "GLSA-201110-06",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201110-06"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1046",
                    "reference_id": "RHSA-2012:1046",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1046"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1047",
                    "reference_id": "RHSA-2012:1047",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1047"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/989-1/",
                    "reference_id": "USN-989-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/989-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2010-2950"
            ],
            "risk_score": 3.0,
            "exploitability": "0.5",
            "weighted_severity": "6.1",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-usmw-6d5u-tba8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49119?format=api",
            "vulnerability_id": "VCID-vjm8-c1u4-wfab",
            "summary": "Multiple vulnerabilities were found in PHP, the worst of which lead\n    to remote execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2336.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2336.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2336",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97714",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97678",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97679",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97684",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97687",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97689",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97691",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97693",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97699",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97701",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97702",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97708",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97711",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.47326",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97713",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.5291",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97931",
                            "published_at": "2026-04-01T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2336"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=820708",
                    "reference_id": "820708",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=820708"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201209-03",
                    "reference_id": "GLSA-201209-03",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201209-03"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1045",
                    "reference_id": "RHSA-2012:1045",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1045"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1046",
                    "reference_id": "RHSA-2012:1046",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1046"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1047",
                    "reference_id": "RHSA-2012:1047",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1047"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1481-1/",
                    "reference_id": "USN-1481-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1481-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-2336"
            ],
            "risk_score": 1.0,
            "exploitability": "2.0",
            "weighted_severity": "0.5",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vjm8-c1u4-wfab"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49112?format=api",
            "vulnerability_id": "VCID-zquc-69kh-yqdg",
            "summary": "Multiple vulnerabilities were found in PHP, the worst of which lead\n    to remote execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0789.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0789.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0789",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91929",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91937",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91945",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91951",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91964",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91969",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91972",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91971",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91968",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91987",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91984",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9198",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91985",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91983",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91981",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91994",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92007",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.0779",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92017",
                            "published_at": "2026-05-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0789"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=783609",
                    "reference_id": "783609",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=783609"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/36789.php",
                    "reference_id": "CVE-2012-0789;OSVDB-79332",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/36789.php"
                },
                {
                    "reference_url": "https://www.securityfocus.com/bid/52043/info",
                    "reference_id": "CVE-2012-0789;OSVDB-79332",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://www.securityfocus.com/bid/52043/info"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201209-03",
                    "reference_id": "GLSA-201209-03",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201209-03"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1045",
                    "reference_id": "RHSA-2012:1045",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1045"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1046",
                    "reference_id": "RHSA-2012:1046",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1046"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:1047",
                    "reference_id": "RHSA-2012:1047",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:1047"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0789"
            ],
            "risk_score": 0.2,
            "exploitability": "2.0",
            "weighted_severity": "0.1",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zquc-69kh-yqdg"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": "3.0",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/php@5.3.3-14%3Farch=el6_3"
}