{"url":"http://public2.vulnerablecode.io/api/packages/138016?format=json","purl":"pkg:generic/curl.se/curl@7.9.4","type":"generic","namespace":"curl.se","name":"curl","version":"7.9.4","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"8.20.0","latest_non_vulnerable_version":"8.20.0","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65692?format=json","vulnerability_id":"VCID-1a1k-d4ez-ybdu","summary":"When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-35252.json","reference_id":"","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-35252.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-35252","reference_id":"","reference_type":"","scores":[{"value":"0.00289","scoring_system":"epss","scoring_elements":"0.52551","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00289","scoring_system":"epss","scoring_elements":"0.52611","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-35252"},{"reference_url":"https://curl.se/docs/CVE-2022-35252.html","reference_id":"","reference_type":"","scores":[{"value":"Low","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2022-35252.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35252","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35252"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://hackerone.com/reports/1613943","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/"}],"url":"https://hackerone.com/reports/1613943"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018831","reference_id":"1018831","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018831"},{"reference_url":"http://seclists.org/fulldisclosure/2023/Jan/20","reference_id":"20","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/"}],"url":"http://seclists.org/fulldisclosure/2023/Jan/20"},{"reference_url":"http://seclists.org/fulldisclosure/2023/Jan/21","reference_id":"21","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/"}],"url":"http://seclists.org/fulldisclosure/2023/Jan/21"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120718","reference_id":"2120718","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120718"},{"reference_url":"https://security.gentoo.org/glsa/202212-01","reference_id":"GLSA-202212-01","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/"}],"url":"https://security.gentoo.org/glsa/202212-01"},{"reference_url":"https://support.apple.com/kb/HT213603","reference_id":"HT213603","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/"}],"url":"https://support.apple.com/kb/HT213603"},{"reference_url":"https://support.apple.com/kb/HT213604","reference_id":"HT213604","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/"}],"url":"https://support.apple.com/kb/HT213604"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html","reference_id":"msg00028.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220930-0005/","reference_id":"ntap-20220930-0005","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220930-0005/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:8840","reference_id":"RHSA-2022:8840","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:8840"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:8841","reference_id":"RHSA-2022:8841","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:8841"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:2478","reference_id":"RHSA-2023:2478","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:2478"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:2963","reference_id":"RHSA-2023:2963","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:2963"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:0428","reference_id":"RHSA-2024:0428","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:0428"},{"reference_url":"https://usn.ubuntu.com/5587-1/","reference_id":"USN-5587-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5587-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137945?format=json","purl":"pkg:generic/curl.se/curl@7.85.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-287k-bzqy-n7ag"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3p2z-61gq-muhs"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6en5-etsd-2bce"},{"vulnerability":"VCID-6ggz-pa5t-77c4"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-85qb-zec7-subc"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-cfry-nx5h-kudv"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fcb7-8163-muf4"},{"vulnerability":"VCID-ffmg-djmk-57hn"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h4nw-va5b-23ef"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-k3nv-gf9b-5ua2"},{"vulnerability":"VCID-k5vr-1fmp-sqbw"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mpuf-pp6z-q3d6"},{"vulnerability":"VCID-ns58-vmsz-5ued"},{"vulnerability":"VCID-nwvb-d466-4uaa"},{"vulnerability":"VCID-p155-gbtu-abg1"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-razg-yr7y-ukgd"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-u1p8-s8vm-3yer"},{"vulnerability":"VCID-v82t-s9e1-2fbw"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wgur-psum-pbck"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.85.0"}],"aliases":["CVE-2022-35252"],"risk_score":1.4,"exploitability":"0.5","weighted_severity":"2.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1a1k-d4ez-ybdu"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65666?format=json","vulnerability_id":"VCID-1b5g-9trz-7ufb","summary":"curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-9586","reference_id":"","reference_type":"","scores":[{"value":"0.01009","scoring_system":"epss","scoring_elements":"0.7743","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01009","scoring_system":"epss","scoring_elements":"0.77458","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-9586"},{"reference_url":"https://curl.se/docs/CVE-2016-9586.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2016-9586.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9586","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9586"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"1.2","scoring_system":"cvssv2","scoring_elements":"AV:L/AC:H/Au:N/C:N/I:N/A:P"},{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"http://www.securitytracker.com/id/1037515","reference_id":"1037515","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/"}],"url":"http://www.securitytracker.com/id/1037515"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406712","reference_id":"1406712","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406712"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848958","reference_id":"848958","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848958"},{"reference_url":"http://www.securityfocus.com/bid/95019","reference_id":"95019","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/"}],"url":"http://www.securityfocus.com/bid/95019"},{"reference_url":"https://curl.haxx.se/docs/adv_20161221A.html","reference_id":"adv_20161221A.html","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/"}],"url":"https://curl.haxx.se/docs/adv_20161221A.html"},{"reference_url":"https://security.archlinux.org/ASA-201612-22","reference_id":"ASA-201612-22","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201612-22"},{"reference_url":"https://security.archlinux.org/ASA-201701-10","reference_id":"ASA-201701-10","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201701-10"},{"reference_url":"https://security.archlinux.org/ASA-201701-11","reference_id":"ASA-201701-11","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201701-11"},{"reference_url":"https://security.archlinux.org/ASA-201701-7","reference_id":"ASA-201701-7","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201701-7"},{"reference_url":"https://security.archlinux.org/ASA-201701-8","reference_id":"ASA-201701-8","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201701-8"},{"reference_url":"https://security.archlinux.org/ASA-201701-9","reference_id":"ASA-201701-9","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201701-9"},{"reference_url":"https://security.archlinux.org/AVG-112","reference_id":"AVG-112","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-112"},{"reference_url":"https://security.archlinux.org/AVG-113","reference_id":"AVG-113","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-113"},{"reference_url":"https://security.archlinux.org/AVG-114","reference_id":"AVG-114","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-114"},{"reference_url":"https://security.archlinux.org/AVG-115","reference_id":"AVG-115","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-115"},{"reference_url":"https://security.archlinux.org/AVG-116","reference_id":"AVG-116","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-116"},{"reference_url":"https://security.archlinux.org/AVG-117","reference_id":"AVG-117","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-117"},{"reference_url":"https://github.com/curl/curl/commit/curl-7_51_0-162-g3ab3c16","reference_id":"curl-7_51_0-162-g3ab3c16","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/"}],"url":"https://github.com/curl/curl/commit/curl-7_51_0-162-g3ab3c16"},{"reference_url":"https://security.gentoo.org/glsa/201701-47","reference_id":"GLSA-201701-47","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/"}],"url":"https://security.gentoo.org/glsa/201701-47"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html","reference_id":"msg00005.html","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html"},{"reference_url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","reference_id":"r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/"}],"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","reference_id":"rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/"}],"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9586","reference_id":"show_bug.cgi?id=CVE-2016-9586","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/"}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9586"},{"reference_url":"https://usn.ubuntu.com/3441-1/","reference_id":"USN-3441-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3441-1/"},{"reference_url":"https://usn.ubuntu.com/3441-2/","reference_id":"USN-3441-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3441-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137890?format=json","purl":"pkg:generic/curl.se/curl@7.52.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-53st-1j3z-h7by"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-k79t-tesa-jfck"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-raxd-4nxj-gkhp"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-uj78-2cgz-zbdb"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w63e-dku9-mqe9"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.52.0"}],"aliases":["CVE-2016-9586"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1b5g-9trz-7ufb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6747?format=json","vulnerability_id":"VCID-5xjw-u8ad-n3g5","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8615","reference_id":"","reference_type":"","scores":[{"value":"0.04293","scoring_system":"epss","scoring_elements":"0.89065","published_at":"2026-06-05T12:55:00Z"},{"value":"0.04293","scoring_system":"epss","scoring_elements":"0.89048","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8615"},{"reference_url":"https://curl.se/docs/CVE-2016-8615.html","reference_id":"","reference_type":"","scores":[{"value":"High","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2016-8615.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"http://www.securitytracker.com/id/1037192","reference_id":"1037192","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/"}],"url":"http://www.securitytracker.com/id/1037192"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388370","reference_id":"1388370","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388370"},{"reference_url":"http://www.securityfocus.com/bid/94096","reference_id":"94096","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/"}],"url":"http://www.securityfocus.com/bid/94096"},{"reference_url":"https://curl.haxx.se/docs/adv_20161102A.html","reference_id":"adv_20161102A.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/"}],"url":"https://curl.haxx.se/docs/adv_20161102A.html"},{"reference_url":"https://security.archlinux.org/ASA-201611-10","reference_id":"ASA-201611-10","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-10"},{"reference_url":"https://security.archlinux.org/ASA-201611-4","reference_id":"ASA-201611-4","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-4"},{"reference_url":"https://security.archlinux.org/ASA-201611-5","reference_id":"ASA-201611-5","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-5"},{"reference_url":"https://security.archlinux.org/ASA-201611-7","reference_id":"ASA-201611-7","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-7"},{"reference_url":"https://security.archlinux.org/ASA-201611-8","reference_id":"ASA-201611-8","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-8"},{"reference_url":"https://security.archlinux.org/ASA-201611-9","reference_id":"ASA-201611-9","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-9"},{"reference_url":"https://security.archlinux.org/AVG-60","reference_id":"AVG-60","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-60"},{"reference_url":"https://security.archlinux.org/AVG-61","reference_id":"AVG-61","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-61"},{"reference_url":"https://security.archlinux.org/AVG-62","reference_id":"AVG-62","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-62"},{"reference_url":"https://security.archlinux.org/AVG-63","reference_id":"AVG-63","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-63"},{"reference_url":"https://security.archlinux.org/AVG-65","reference_id":"AVG-65","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-65"},{"reference_url":"https://security.archlinux.org/AVG-66","reference_id":"AVG-66","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-66"},{"reference_url":"https://curl.haxx.se/CVE-2016-8615.patch","reference_id":"CVE-2016-8615.patch","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/"}],"url":"https://curl.haxx.se/CVE-2016-8615.patch"},{"reference_url":"https://security.gentoo.org/glsa/201701-47","reference_id":"GLSA-201701-47","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/"}],"url":"https://security.gentoo.org/glsa/201701-47"},{"reference_url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","reference_id":"r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/"}],"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","reference_id":"rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/"}],"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615","reference_id":"show_bug.cgi?id=CVE-2016-8615","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/"}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615"},{"reference_url":"https://www.tenable.com/security/tns-2016-21","reference_id":"tns-2016-21","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/"}],"url":"https://www.tenable.com/security/tns-2016-21"},{"reference_url":"https://usn.ubuntu.com/3123-1/","reference_id":"USN-3123-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3123-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137889?format=json","purl":"pkg:generic/curl.se/curl@7.51.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-raxd-4nxj-gkhp"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0"}],"aliases":["CVE-2016-8615"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5xjw-u8ad-n3g5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65656?format=json","vulnerability_id":"VCID-6fv7-7u2t-gfgb","summary":"cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working directory on a different drive via a colon in a remote file name.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-0754","reference_id":"","reference_type":"","scores":[{"value":"0.00351","scoring_system":"epss","scoring_elements":"0.57772","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00351","scoring_system":"epss","scoring_elements":"0.57825","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-0754"},{"reference_url":"https://curl.se/docs/CVE-2016-0754.html","reference_id":"","reference_type":"","scores":[{"value":"High","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2016-0754.html"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137879?format=json","purl":"pkg:generic/curl.se/curl@7.47.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1y6d-7vfu-ybb3"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3s4s-6c3v-7kgn"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-51ac-1jc2-vfed"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-5xjw-u8ad-n3g5"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-6rk4-vb5u-bkg6"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-av4f-gxku-qbhp"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-dndt-tapy-23d2"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-mq44-5pmp-2qhh"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8ja-keyk-fyfb"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qe9z-wuze-tucq"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-rfdp-gsgs-eubq"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-s2gu-8jpq-mub9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sesh-938m-x3f8"},{"vulnerability":"VCID-snsg-c2up-b7cn"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-ugrr-z2zv-6qgp"},{"vulnerability":"VCID-vfc1-yy11-bycp"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-xyze-msxs-1qem"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"},{"vulnerability":"VCID-zv25-wupq-bqfk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.47.0"}],"aliases":["CVE-2016-0754"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6fv7-7u2t-gfgb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65662?format=json","vulnerability_id":"VCID-6rk4-vb5u-bkg6","summary":"curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-5420","reference_id":"","reference_type":"","scores":[{"value":"0.01071","scoring_system":"epss","scoring_elements":"0.7808","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01071","scoring_system":"epss","scoring_elements":"0.78108","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-5420"},{"reference_url":"https://curl.se/docs/CVE-2016-5420.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2016-5420.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.9","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:S/C:P/I:P/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362190","reference_id":"1362190","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362190"},{"reference_url":"https://security.gentoo.org/glsa/201701-47","reference_id":"GLSA-201701-47","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-47"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:2575","reference_id":"RHSA-2016:2575","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:2575"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:2957","reference_id":"RHSA-2016:2957","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:2957"},{"reference_url":"https://usn.ubuntu.com/3048-1/","reference_id":"USN-3048-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3048-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137886?format=json","purl":"pkg:generic/curl.se/curl@7.50.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1y6d-7vfu-ybb3"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-51ac-1jc2-vfed"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-5xjw-u8ad-n3g5"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-av4f-gxku-qbhp"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8ja-keyk-fyfb"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qe9z-wuze-tucq"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-raxd-4nxj-gkhp"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-s2gu-8jpq-mub9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sesh-938m-x3f8"},{"vulnerability":"VCID-snsg-c2up-b7cn"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-ugrr-z2zv-6qgp"},{"vulnerability":"VCID-vfc1-yy11-bycp"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-xyze-msxs-1qem"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"},{"vulnerability":"VCID-zv25-wupq-bqfk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.50.1"}],"aliases":["CVE-2016-5420"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6rk4-vb5u-bkg6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6859?format=json","vulnerability_id":"VCID-738z-myg9-37hr","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27774","reference_id":"","reference_type":"","scores":[{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.54842","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.54901","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27774"},{"reference_url":"https://curl.se/docs/CVE-2022-27774.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2022-27774.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://hackerone.com/reports/1543773","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/"}],"url":"https://hackerone.com/reports/1543773"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010254","reference_id":"1010254","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010254"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077547","reference_id":"2077547","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077547"},{"reference_url":"https://security.archlinux.org/AVG-2685","reference_id":"AVG-2685","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2685"},{"reference_url":"https://www.debian.org/security/2022/dsa-5197","reference_id":"dsa-5197","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/"}],"url":"https://www.debian.org/security/2022/dsa-5197"},{"reference_url":"https://security.gentoo.org/glsa/202212-01","reference_id":"GLSA-202212-01","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/"}],"url":"https://security.gentoo.org/glsa/202212-01"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html","reference_id":"msg00028.html","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220609-0008/","reference_id":"ntap-20220609-0008","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220609-0008/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5245","reference_id":"RHSA-2022:5245","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5245"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5313","reference_id":"RHSA-2022:5313","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5313"},{"reference_url":"https://usn.ubuntu.com/5397-1/","reference_id":"USN-5397-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5397-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137941?format=json","purl":"pkg:generic/curl.se/curl@7.83.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-287k-bzqy-n7ag"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3p2z-61gq-muhs"},{"vulnerability":"VCID-5m9y-9y57-kqg6"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6en5-etsd-2bce"},{"vulnerability":"VCID-6ggz-pa5t-77c4"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7z3h-9pk3-rqct"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-cfry-nx5h-kudv"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fcb7-8163-muf4"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h4nw-va5b-23ef"},{"vulnerability":"VCID-hb4z-s871-d7ck"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-k5vr-1fmp-sqbw"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mqzd-mcw5-s3h6"},{"vulnerability":"VCID-mray-vkqx-5ka7"},{"vulnerability":"VCID-ns58-vmsz-5ued"},{"vulnerability":"VCID-nwvb-d466-4uaa"},{"vulnerability":"VCID-p155-gbtu-abg1"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-razg-yr7y-ukgd"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-tzs5-qzhn-rqbk"},{"vulnerability":"VCID-u1p8-s8vm-3yer"},{"vulnerability":"VCID-v82t-s9e1-2fbw"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wbwx-5vg3-uqcd"},{"vulnerability":"VCID-wgur-psum-pbck"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.83.0"}],"aliases":["CVE-2022-27774"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-738z-myg9-37hr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5469?format=json","vulnerability_id":"VCID-a58z-fu87-9ybs","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22898.json","reference_id":"","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22898.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-22898","reference_id":"","reference_type":"","scores":[{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33296","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33397","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-22898"},{"reference_url":"https://curl.se/docs/CVE-2021-22898.html","reference_id":"","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/"}],"url":"https://curl.se/docs/CVE-2021-22898.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://hackerone.com/reports/1176461","reference_id":"","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/"}],"url":"https://hackerone.com/reports/1176461"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964887","reference_id":"1964887","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964887"},{"reference_url":"https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde","reference_id":"39ce47f219b09c380b81f89fe54ac586c8db6bde","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/"}],"url":"https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde"},{"reference_url":"http://www.openwall.com/lists/oss-security/2021/07/21/4","reference_id":"4","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/"}],"url":"http://www.openwall.com/lists/oss-security/2021/07/21/4"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989228","reference_id":"989228","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989228"},{"reference_url":"https://security.archlinux.org/ASA-202106-4","reference_id":"ASA-202106-4","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202106-4"},{"reference_url":"https://security.archlinux.org/ASA-202106-5","reference_id":"ASA-202106-5","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202106-5"},{"reference_url":"https://security.archlinux.org/ASA-202106-6","reference_id":"ASA-202106-6","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202106-6"},{"reference_url":"https://security.archlinux.org/ASA-202106-7","reference_id":"ASA-202106-7","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202106-7"},{"reference_url":"https://security.archlinux.org/ASA-202106-8","reference_id":"ASA-202106-8","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202106-8"},{"reference_url":"https://security.archlinux.org/ASA-202106-9","reference_id":"ASA-202106-9","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202106-9"},{"reference_url":"https://security.archlinux.org/AVG-1995","reference_id":"AVG-1995","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1995"},{"reference_url":"https://security.archlinux.org/AVG-1996","reference_id":"AVG-1996","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1996"},{"reference_url":"https://security.archlinux.org/AVG-1997","reference_id":"AVG-1997","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1997"},{"reference_url":"https://security.archlinux.org/AVG-1998","reference_id":"AVG-1998","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1998"},{"reference_url":"https://security.archlinux.org/AVG-1999","reference_id":"AVG-1999","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1999"},{"reference_url":"https://security.archlinux.org/AVG-2000","reference_id":"AVG-2000","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2000"},{"reference_url":"https://www.debian.org/security/2022/dsa-5197","reference_id":"dsa-5197","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/"}],"url":"https://www.debian.org/security/2022/dsa-5197"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/","reference_id":"FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/"},{"reference_url":"https://security.gentoo.org/glsa/202105-36","reference_id":"GLSA-202105-36","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202105-36"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html","reference_id":"msg00017.html","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","reference_id":"msg00017.html","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q/","reference_id":"POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q/"},{"reference_url":"https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E","reference_id":"rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/"}],"url":"https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4511","reference_id":"RHSA-2021:4511","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4511"},{"reference_url":"https://usn.ubuntu.com/5021-1/","reference_id":"USN-5021-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5021-1/"},{"reference_url":"https://usn.ubuntu.com/5021-2/","reference_id":"USN-5021-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5021-2/"},{"reference_url":"https://usn.ubuntu.com/5894-1/","reference_id":"USN-5894-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5894-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137933?format=json","purl":"pkg:generic/curl.se/curl@7.77.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-287k-bzqy-n7ag"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3p2z-61gq-muhs"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6ggz-pa5t-77c4"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-7z3h-9pk3-rqct"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-cfry-nx5h-kudv"},{"vulnerability":"VCID-cjyz-fdnv-b3g4"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fcb7-8163-muf4"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h4nw-va5b-23ef"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-k5vr-1fmp-sqbw"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-ns58-vmsz-5ued"},{"vulnerability":"VCID-nwvb-d466-4uaa"},{"vulnerability":"VCID-p155-gbtu-abg1"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-razg-yr7y-ukgd"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tzs5-qzhn-rqbk"},{"vulnerability":"VCID-u1p8-s8vm-3yer"},{"vulnerability":"VCID-urgp-rqyc-sqer"},{"vulnerability":"VCID-v82t-s9e1-2fbw"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wbwx-5vg3-uqcd"},{"vulnerability":"VCID-wgur-psum-pbck"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.77.0"}],"aliases":["CVE-2021-22898"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-a58z-fu87-9ybs"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7240?format=json","vulnerability_id":"VCID-am31-t2h3-zbgw","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22925.json","reference_id":"","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22925.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-22925","reference_id":"","reference_type":"","scores":[{"value":"0.00233","scoring_system":"epss","scoring_elements":"0.46284","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00233","scoring_system":"epss","scoring_elements":"0.46217","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-22925"},{"reference_url":"https://curl.se/docs/CVE-2021-22925.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2021-22925.html"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://hackerone.com/reports/1223882","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/"}],"url":"https://hackerone.com/reports/1223882"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970902","reference_id":"1970902","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970902"},{"reference_url":"http://seclists.org/fulldisclosure/2021/Sep/39","reference_id":"39","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/"}],"url":"http://seclists.org/fulldisclosure/2021/Sep/39"},{"reference_url":"http://seclists.org/fulldisclosure/2021/Sep/40","reference_id":"40","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/"}],"url":"http://seclists.org/fulldisclosure/2021/Sep/40"},{"reference_url":"https://security.archlinux.org/ASA-202107-59","reference_id":"ASA-202107-59","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202107-59"},{"reference_url":"https://security.archlinux.org/ASA-202107-60","reference_id":"ASA-202107-60","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202107-60"},{"reference_url":"https://security.archlinux.org/ASA-202107-61","reference_id":"ASA-202107-61","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202107-61"},{"reference_url":"https://security.archlinux.org/ASA-202107-62","reference_id":"ASA-202107-62","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202107-62"},{"reference_url":"https://security.archlinux.org/ASA-202107-63","reference_id":"ASA-202107-63","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202107-63"},{"reference_url":"https://security.archlinux.org/ASA-202107-64","reference_id":"ASA-202107-64","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202107-64"},{"reference_url":"https://security.archlinux.org/AVG-2194","reference_id":"AVG-2194","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2194"},{"reference_url":"https://security.archlinux.org/AVG-2195","reference_id":"AVG-2195","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2195"},{"reference_url":"https://security.archlinux.org/AVG-2196","reference_id":"AVG-2196","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2196"},{"reference_url":"https://security.archlinux.org/AVG-2197","reference_id":"AVG-2197","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2197"},{"reference_url":"https://security.archlinux.org/AVG-2198","reference_id":"AVG-2198","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2198"},{"reference_url":"https://security.archlinux.org/AVG-2199","reference_id":"AVG-2199","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2199"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/","reference_id":"FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/"},{"reference_url":"https://security.gentoo.org/glsa/202212-01","reference_id":"GLSA-202212-01","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/"}],"url":"https://security.gentoo.org/glsa/202212-01"},{"reference_url":"https://support.apple.com/kb/HT212804","reference_id":"HT212804","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/"}],"url":"https://support.apple.com/kb/HT212804"},{"reference_url":"https://support.apple.com/kb/HT212805","reference_id":"HT212805","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/"}],"url":"https://support.apple.com/kb/HT212805"},{"reference_url":"https://security.netapp.com/advisory/ntap-20210902-0003/","reference_id":"ntap-20210902-0003","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/"}],"url":"https://security.netapp.com/advisory/ntap-20210902-0003/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4511","reference_id":"RHSA-2021:4511","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4511"},{"reference_url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","reference_id":"ssa-484086.pdf","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/"}],"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf"},{"reference_url":"https://usn.ubuntu.com/5021-1/","reference_id":"USN-5021-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5021-1/"},{"reference_url":"https://usn.ubuntu.com/5021-2/","reference_id":"USN-5021-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5021-2/"},{"reference_url":"https://usn.ubuntu.com/5894-1/","reference_id":"USN-5894-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5894-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137934?format=json","purl":"pkg:generic/curl.se/curl@7.78.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-287k-bzqy-n7ag"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3p2z-61gq-muhs"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6ggz-pa5t-77c4"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-7z3h-9pk3-rqct"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-cfry-nx5h-kudv"},{"vulnerability":"VCID-cjyz-fdnv-b3g4"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fcb7-8163-muf4"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h4nw-va5b-23ef"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-k5vr-1fmp-sqbw"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-ns58-vmsz-5ued"},{"vulnerability":"VCID-nwvb-d466-4uaa"},{"vulnerability":"VCID-p155-gbtu-abg1"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-razg-yr7y-ukgd"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-tzs5-qzhn-rqbk"},{"vulnerability":"VCID-u1p8-s8vm-3yer"},{"vulnerability":"VCID-urgp-rqyc-sqer"},{"vulnerability":"VCID-v82t-s9e1-2fbw"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wbwx-5vg3-uqcd"},{"vulnerability":"VCID-wgur-psum-pbck"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.78.0"}],"aliases":["CVE-2021-22925"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-am31-t2h3-zbgw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6740?format=json","vulnerability_id":"VCID-av4f-gxku-qbhp","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8624","reference_id":"","reference_type":"","scores":[{"value":"0.01363","scoring_system":"epss","scoring_elements":"0.8054","published_at":"2026-06-05T12:55:00Z"},{"value":"0.01363","scoring_system":"epss","scoring_elements":"0.80514","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8624"},{"reference_url":"https://curl.se/docs/CVE-2016-8624.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2016-8624.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"http://www.securitytracker.com/id/1037192","reference_id":"1037192","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/"}],"url":"http://www.securitytracker.com/id/1037192"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388390","reference_id":"1388390","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388390"},{"reference_url":"http://www.securityfocus.com/bid/94103","reference_id":"94103","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/"}],"url":"http://www.securityfocus.com/bid/94103"},{"reference_url":"https://curl.haxx.se/docs/adv_20161102J.html","reference_id":"adv_20161102J.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/"}],"url":"https://curl.haxx.se/docs/adv_20161102J.html"},{"reference_url":"https://security.archlinux.org/ASA-201611-10","reference_id":"ASA-201611-10","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-10"},{"reference_url":"https://security.archlinux.org/ASA-201611-4","reference_id":"ASA-201611-4","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-4"},{"reference_url":"https://security.archlinux.org/ASA-201611-5","reference_id":"ASA-201611-5","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-5"},{"reference_url":"https://security.archlinux.org/ASA-201611-7","reference_id":"ASA-201611-7","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-7"},{"reference_url":"https://security.archlinux.org/ASA-201611-8","reference_id":"ASA-201611-8","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-8"},{"reference_url":"https://security.archlinux.org/ASA-201611-9","reference_id":"ASA-201611-9","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-9"},{"reference_url":"https://security.archlinux.org/AVG-60","reference_id":"AVG-60","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-60"},{"reference_url":"https://security.archlinux.org/AVG-61","reference_id":"AVG-61","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-61"},{"reference_url":"https://security.archlinux.org/AVG-62","reference_id":"AVG-62","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-62"},{"reference_url":"https://security.archlinux.org/AVG-63","reference_id":"AVG-63","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-63"},{"reference_url":"https://security.archlinux.org/AVG-65","reference_id":"AVG-65","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-65"},{"reference_url":"https://security.archlinux.org/AVG-66","reference_id":"AVG-66","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-66"},{"reference_url":"https://security.gentoo.org/glsa/201701-47","reference_id":"GLSA-201701-47","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/"}],"url":"https://security.gentoo.org/glsa/201701-47"},{"reference_url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","reference_id":"r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/"}],"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","reference_id":"rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/"}],"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E","reference_id":"rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/"}],"url":"https://lists.apache.org/thread.html/rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8624","reference_id":"show_bug.cgi?id=CVE-2016-8624","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/"}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8624"},{"reference_url":"https://www.tenable.com/security/tns-2016-21","reference_id":"tns-2016-21","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/"}],"url":"https://www.tenable.com/security/tns-2016-21"},{"reference_url":"https://usn.ubuntu.com/3123-1/","reference_id":"USN-3123-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3123-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137889?format=json","purl":"pkg:generic/curl.se/curl@7.51.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-raxd-4nxj-gkhp"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0"}],"aliases":["CVE-2016-8624"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-av4f-gxku-qbhp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65701?format=json","vulnerability_id":"VCID-azcz-b8f2-63be","summary":"A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27533.json","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27533.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-27533","reference_id":"","reference_type":"","scores":[{"value":"0.00179","scoring_system":"epss","scoring_elements":"0.39261","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-27533"},{"reference_url":"https://curl.se/docs/CVE-2023-27533.html","reference_id":"","reference_type":"","scores":[{"value":"Low","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2023-27533.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27533","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27533"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://hackerone.com/reports/1891474","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/"}],"url":"https://hackerone.com/reports/1891474"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179062","reference_id":"2179062","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179062"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","reference_id":"36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/"},{"reference_url":"https://security.gentoo.org/glsa/202310-12","reference_id":"GLSA-202310-12","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/"}],"url":"https://security.gentoo.org/glsa/202310-12"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","reference_id":"msg00025.html","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20230420-0011/","reference_id":"ntap-20230420-0011","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/"}],"url":"https://security.netapp.com/advisory/ntap-20230420-0011/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:3354","reference_id":"RHSA-2023:3354","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:3354"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:3355","reference_id":"RHSA-2023:3355","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:3355"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6679","reference_id":"RHSA-2023:6679","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6679"},{"reference_url":"https://usn.ubuntu.com/5964-1/","reference_id":"USN-5964-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5964-1/"},{"reference_url":"https://usn.ubuntu.com/5964-2/","reference_id":"USN-5964-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5964-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137950?format=json","purl":"pkg:generic/curl.se/curl@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3p2z-61gq-muhs"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6en5-etsd-2bce"},{"vulnerability":"VCID-6ggz-pa5t-77c4"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-85qb-zec7-subc"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fcb7-8163-muf4"},{"vulnerability":"VCID-ffmg-djmk-57hn"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gux4-dncg-h7a6"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-k3nv-gf9b-5ua2"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-p155-gbtu-abg1"},{"vulnerability":"VCID-razg-yr7y-ukgd"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-u1p8-s8vm-3yer"},{"vulnerability":"VCID-v82t-s9e1-2fbw"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wgur-psum-pbck"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.0.0"}],"aliases":["CVE-2023-27533"],"risk_score":1.9,"exploitability":"0.5","weighted_severity":"3.9","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-azcz-b8f2-63be"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65691?format=json","vulnerability_id":"VCID-cdzf-3ydt-8bdk","summary":"When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32221.json","reference_id":"","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32221.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-32221","reference_id":"","reference_type":"","scores":[{"value":"0.01853","scoring_system":"epss","scoring_elements":"0.83366","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01853","scoring_system":"epss","scoring_elements":"0.8339","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-32221"},{"reference_url":"https://curl.se/docs/CVE-2022-32221.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2022-32221.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://hackerone.com/reports/1704017","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/"}],"url":"https://hackerone.com/reports/1704017"},{"reference_url":"http://seclists.org/fulldisclosure/2023/Jan/19","reference_id":"19","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/"}],"url":"http://seclists.org/fulldisclosure/2023/Jan/19"},{"reference_url":"http://seclists.org/fulldisclosure/2023/Jan/20","reference_id":"20","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/"}],"url":"http://seclists.org/fulldisclosure/2023/Jan/20"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135411","reference_id":"2135411","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135411"},{"reference_url":"http://www.openwall.com/lists/oss-security/2023/05/17/4","reference_id":"4","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/"}],"url":"http://www.openwall.com/lists/oss-security/2023/05/17/4"},{"reference_url":"https://www.debian.org/security/2023/dsa-5330","reference_id":"dsa-5330","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/"}],"url":"https://www.debian.org/security/2023/dsa-5330"},{"reference_url":"https://security.gentoo.org/glsa/202212-01","reference_id":"GLSA-202212-01","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/"}],"url":"https://security.gentoo.org/glsa/202212-01"},{"reference_url":"https://support.apple.com/kb/HT213604","reference_id":"HT213604","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/"}],"url":"https://support.apple.com/kb/HT213604"},{"reference_url":"https://support.apple.com/kb/HT213605","reference_id":"HT213605","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/"}],"url":"https://support.apple.com/kb/HT213605"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html","reference_id":"msg00028.html","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20230110-0006/","reference_id":"ntap-20230110-0006","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/"}],"url":"https://security.netapp.com/advisory/ntap-20230110-0006/"},{"reference_url":"https://security.netapp.com/advisory/ntap-20230208-0002/","reference_id":"ntap-20230208-0002","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/"}],"url":"https://security.netapp.com/advisory/ntap-20230208-0002/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:8840","reference_id":"RHSA-2022:8840","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:8840"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:8841","reference_id":"RHSA-2022:8841","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:8841"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:0333","reference_id":"RHSA-2023:0333","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:0333"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:4139","reference_id":"RHSA-2023:4139","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:4139"},{"reference_url":"https://usn.ubuntu.com/5702-1/","reference_id":"USN-5702-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5702-1/"},{"reference_url":"https://usn.ubuntu.com/5702-2/","reference_id":"USN-5702-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5702-2/"},{"reference_url":"https://usn.ubuntu.com/5823-1/","reference_id":"USN-5823-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5823-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137946?format=json","purl":"pkg:generic/curl.se/curl@7.86.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-287k-bzqy-n7ag"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3p2z-61gq-muhs"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6en5-etsd-2bce"},{"vulnerability":"VCID-6ggz-pa5t-77c4"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-85qb-zec7-subc"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cfry-nx5h-kudv"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fcb7-8163-muf4"},{"vulnerability":"VCID-ffmg-djmk-57hn"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-k3nv-gf9b-5ua2"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-ns58-vmsz-5ued"},{"vulnerability":"VCID-nwvb-d466-4uaa"},{"vulnerability":"VCID-p155-gbtu-abg1"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-razg-yr7y-ukgd"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-u1p8-s8vm-3yer"},{"vulnerability":"VCID-v82t-s9e1-2fbw"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wgur-psum-pbck"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.86.0"}],"aliases":["CVE-2022-32221"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-cdzf-3ydt-8bdk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65661?format=json","vulnerability_id":"VCID-dndt-tapy-23d2","summary":"curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json","reference_id":"","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-5419","reference_id":"","reference_type":"","scores":[{"value":"0.01912","scoring_system":"epss","scoring_elements":"0.83631","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01912","scoring_system":"epss","scoring_elements":"0.83655","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-5419"},{"reference_url":"https://curl.se/docs/CVE-2016-5419.html","reference_id":"","reference_type":"","scores":[{"value":"High","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2016-5419.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362183","reference_id":"1362183","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362183"},{"reference_url":"https://security.gentoo.org/glsa/201701-47","reference_id":"GLSA-201701-47","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-47"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:2575","reference_id":"RHSA-2016:2575","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:2575"},{"reference_url":"https://access.redhat.com/errata/RHSA-2016:2957","reference_id":"RHSA-2016:2957","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2016:2957"},{"reference_url":"https://usn.ubuntu.com/3048-1/","reference_id":"USN-3048-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3048-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137886?format=json","purl":"pkg:generic/curl.se/curl@7.50.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1y6d-7vfu-ybb3"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-51ac-1jc2-vfed"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-5xjw-u8ad-n3g5"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-av4f-gxku-qbhp"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8ja-keyk-fyfb"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qe9z-wuze-tucq"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-raxd-4nxj-gkhp"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-s2gu-8jpq-mub9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sesh-938m-x3f8"},{"vulnerability":"VCID-snsg-c2up-b7cn"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-ugrr-z2zv-6qgp"},{"vulnerability":"VCID-vfc1-yy11-bycp"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-xyze-msxs-1qem"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"},{"vulnerability":"VCID-zv25-wupq-bqfk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.50.1"}],"aliases":["CVE-2016-5419"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dndt-tapy-23d2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65653?format=json","vulnerability_id":"VCID-f276-amhj-9yfx","summary":"The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3153.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3153.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2015-3153","reference_id":"","reference_type":"","scores":[{"value":"0.08372","scoring_system":"epss","scoring_elements":"0.92451","published_at":"2026-06-04T12:55:00Z"},{"value":"0.08372","scoring_system":"epss","scoring_elements":"0.92464","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2015-3153"},{"reference_url":"https://curl.se/docs/CVE-2015-3153.html","reference_id":"","reference_type":"","scores":[{"value":"High","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2015-3153.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3153","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3153"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1217341","reference_id":"1217341","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1217341"},{"reference_url":"https://usn.ubuntu.com/2591-1/","reference_id":"USN-2591-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2591-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137874?format=json","purl":"pkg:generic/curl.se/curl@7.42.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1y6d-7vfu-ybb3"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3s4s-6c3v-7kgn"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-51ac-1jc2-vfed"},{"vulnerability":"VCID-5m1h-d3cm-dqfu"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-5xjw-u8ad-n3g5"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-6fv7-7u2t-gfgb"},{"vulnerability":"VCID-6rk4-vb5u-bkg6"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-9rvz-5w86-u7e5"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-av4f-gxku-qbhp"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdar-9qhw-hke7"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-dndt-tapy-23d2"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-mq44-5pmp-2qhh"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8ja-keyk-fyfb"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qe9z-wuze-tucq"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-rfdp-gsgs-eubq"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-s2gu-8jpq-mub9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sesh-938m-x3f8"},{"vulnerability":"VCID-snsg-c2up-b7cn"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-ugrr-z2zv-6qgp"},{"vulnerability":"VCID-vfc1-yy11-bycp"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-xyze-msxs-1qem"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"},{"vulnerability":"VCID-zv25-wupq-bqfk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.42.1"}],"aliases":["CVE-2015-3153"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-f276-amhj-9yfx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65647?format=json","vulnerability_id":"VCID-f922-jx9w-mbc5","summary":"CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8150.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8150.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-8150","reference_id":"","reference_type":"","scores":[{"value":"0.01225","scoring_system":"epss","scoring_elements":"0.79462","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01225","scoring_system":"epss","scoring_elements":"0.79489","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-8150"},{"reference_url":"https://curl.se/docs/CVE-2014-8150.html","reference_id":"","reference_type":"","scores":[{"value":"High","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2014-8150.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8150","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8150"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1178692","reference_id":"1178692","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1178692"},{"reference_url":"https://security.gentoo.org/glsa/201701-47","reference_id":"GLSA-201701-47","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-47"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:1254","reference_id":"RHSA-2015:1254","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:1254"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:2159","reference_id":"RHSA-2015:2159","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:2159"},{"reference_url":"https://usn.ubuntu.com/2474-1/","reference_id":"USN-2474-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2474-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137871?format=json","purl":"pkg:generic/curl.se/curl@7.40.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1y6d-7vfu-ybb3"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3s4s-6c3v-7kgn"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-51ac-1jc2-vfed"},{"vulnerability":"VCID-5m1h-d3cm-dqfu"},{"vulnerability":"VCID-5sem-gndf-97e6"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-5xjw-u8ad-n3g5"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-6fv7-7u2t-gfgb"},{"vulnerability":"VCID-6rk4-vb5u-bkg6"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-8j6v-xbhy-7uc2"},{"vulnerability":"VCID-9rvz-5w86-u7e5"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-av4f-gxku-qbhp"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdar-9qhw-hke7"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-dndt-tapy-23d2"},{"vulnerability":"VCID-f276-amhj-9yfx"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-mq44-5pmp-2qhh"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-p9v4-nweu-vydg"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8ja-keyk-fyfb"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qe9z-wuze-tucq"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-rfdp-gsgs-eubq"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-s2gu-8jpq-mub9"},{"vulnerability":"VCID-s6gu-gm97-fyfk"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sesh-938m-x3f8"},{"vulnerability":"VCID-snsg-c2up-b7cn"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-ugrr-z2zv-6qgp"},{"vulnerability":"VCID-vfc1-yy11-bycp"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-xyze-msxs-1qem"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"},{"vulnerability":"VCID-zv25-wupq-bqfk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.40.0"}],"aliases":["CVE-2014-8150"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-f922-jx9w-mbc5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5600?format=json","vulnerability_id":"VCID-fhc8-r8gv-bugj","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22876.json","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22876.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-22876","reference_id":"","reference_type":"","scores":[{"value":"0.00115","scoring_system":"epss","scoring_elements":"0.29867","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00115","scoring_system":"epss","scoring_elements":"0.29799","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-22876"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://hackerone.com/reports/1101882","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/"}],"url":"https://hackerone.com/reports/1101882"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941964","reference_id":"1941964","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941964"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/","reference_id":"2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986269","reference_id":"986269","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986269"},{"reference_url":"https://security.archlinux.org/AVG-1753","reference_id":"AVG-1753","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1753"},{"reference_url":"https://security.archlinux.org/AVG-1754","reference_id":"AVG-1754","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1754"},{"reference_url":"https://security.archlinux.org/AVG-1755","reference_id":"AVG-1755","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1755"},{"reference_url":"https://security.archlinux.org/AVG-1756","reference_id":"AVG-1756","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1756"},{"reference_url":"https://security.archlinux.org/AVG-1757","reference_id":"AVG-1757","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1757"},{"reference_url":"https://security.archlinux.org/AVG-1758","reference_id":"AVG-1758","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1758"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22876","reference_id":"CVE-2021-22876","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22876"},{"reference_url":"https://curl.se/docs/CVE-2021-22876.html","reference_id":"CVE-2021-22876.HTML","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Low","scoring_system":"cvssv3.1","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/"}],"url":"https://curl.se/docs/CVE-2021-22876.html"},{"reference_url":"https://security.gentoo.org/glsa/202105-36","reference_id":"GLSA-202105-36","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/"}],"url":"https://security.gentoo.org/glsa/202105-36"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/","reference_id":"ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/","reference_id":"KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html","reference_id":"msg00019.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20210521-0007/","reference_id":"ntap-20210521-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/"}],"url":"https://security.netapp.com/advisory/ntap-20210521-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:2471","reference_id":"RHSA-2021:2471","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:2471"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:2472","reference_id":"RHSA-2021:2472","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:2472"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4511","reference_id":"RHSA-2021:4511","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4511"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:1354","reference_id":"RHSA-2022:1354","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:1354"},{"reference_url":"https://usn.ubuntu.com/4898-1/","reference_id":"USN-4898-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4898-1/"},{"reference_url":"https://usn.ubuntu.com/4903-1/","reference_id":"USN-4903-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4903-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137931?format=json","purl":"pkg:generic/curl.se/curl@7.76.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3p2z-61gq-muhs"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6ggz-pa5t-77c4"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-7z3h-9pk3-rqct"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-byzw-xw9s-pkga"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-cfry-nx5h-kudv"},{"vulnerability":"VCID-cjyz-fdnv-b3g4"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fcb7-8163-muf4"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-p155-gbtu-abg1"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-razg-yr7y-ukgd"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tzs5-qzhn-rqbk"},{"vulnerability":"VCID-u1p8-s8vm-3yer"},{"vulnerability":"VCID-urgp-rqyc-sqer"},{"vulnerability":"VCID-v82t-s9e1-2fbw"},{"vulnerability":"VCID-vgap-k5zw-9qbn"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wbwx-5vg3-uqcd"},{"vulnerability":"VCID-wgur-psum-pbck"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.76.0"}],"aliases":["CVE-2021-22876"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fhc8-r8gv-bugj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65635?format=json","vulnerability_id":"VCID-g72q-eedp-aufb","summary":"The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1944.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1944.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2013-1944","reference_id":"","reference_type":"","scores":[{"value":"0.02482","scoring_system":"epss","scoring_elements":"0.85568","published_at":"2026-06-04T12:55:00Z"},{"value":"0.02482","scoring_system":"epss","scoring_elements":"0.8559","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2013-1944"},{"reference_url":"https://curl.se/docs/CVE-2013-1944.html","reference_id":"","reference_type":"","scores":[{"value":"High","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2013-1944.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1944","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1944"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=705274","reference_id":"705274","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=705274"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=950577","reference_id":"950577","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=950577"},{"reference_url":"https://security.gentoo.org/glsa/201401-14","reference_id":"GLSA-201401-14","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-14"},{"reference_url":"https://access.redhat.com/errata/RHSA-2013:0771","reference_id":"RHSA-2013:0771","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2013:0771"},{"reference_url":"https://usn.ubuntu.com/1801-1/","reference_id":"USN-1801-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1801-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137858?format=json","purl":"pkg:generic/curl.se/curl@7.30.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-2u6v-6vm9-z3by"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3s4s-6c3v-7kgn"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-51ac-1jc2-vfed"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5xjw-u8ad-n3g5"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-6fv7-7u2t-gfgb"},{"vulnerability":"VCID-6rk4-vb5u-bkg6"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-8j6v-xbhy-7uc2"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-av4f-gxku-qbhp"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdar-9qhw-hke7"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-cmcn-f8ws-q3h2"},{"vulnerability":"VCID-cxy6-vzz9-w3ff"},{"vulnerability":"VCID-dndt-tapy-23d2"},{"vulnerability":"VCID-e4qf-7gqs-qyg3"},{"vulnerability":"VCID-f276-amhj-9yfx"},{"vulnerability":"VCID-f922-jx9w-mbc5"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhu3-dp3m-gbgm"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-nkmd-xb13-mbg9"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-p9v4-nweu-vydg"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8ja-keyk-fyfb"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-q9ht-ra39-kuef"},{"vulnerability":"VCID-qe9z-wuze-tucq"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-rfdp-gsgs-eubq"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-s2gu-8jpq-mub9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sesh-938m-x3f8"},{"vulnerability":"VCID-snsg-c2up-b7cn"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-tyqp-e8cp-dbbm"},{"vulnerability":"VCID-ugrr-z2zv-6qgp"},{"vulnerability":"VCID-uh5a-zcds-3bcc"},{"vulnerability":"VCID-vfc1-yy11-bycp"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-xsnb-eujr-y7bz"},{"vulnerability":"VCID-xyze-msxs-1qem"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"},{"vulnerability":"VCID-zv25-wupq-bqfk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.30.0"}],"aliases":["CVE-2013-1944"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-g72q-eedp-aufb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65636?format=json","vulnerability_id":"VCID-hhu3-dp3m-gbgm","summary":"Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a \"%\" (percent) character.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2174.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2174.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2013-2174","reference_id":"","reference_type":"","scores":[{"value":"0.03181","scoring_system":"epss","scoring_elements":"0.872","published_at":"2026-06-04T12:55:00Z"},{"value":"0.03181","scoring_system":"epss","scoring_elements":"0.87223","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2013-2174"},{"reference_url":"https://curl.se/docs/CVE-2013-2174.html","reference_id":"","reference_type":"","scores":[{"value":"High","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2013-2174.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2174","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2174"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=965640","reference_id":"965640","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=965640"},{"reference_url":"https://security.gentoo.org/glsa/201401-14","reference_id":"GLSA-201401-14","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-14"},{"reference_url":"https://access.redhat.com/errata/RHSA-2013:0983","reference_id":"RHSA-2013:0983","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2013:0983"},{"reference_url":"https://usn.ubuntu.com/1894-1/","reference_id":"USN-1894-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1894-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137859?format=json","purl":"pkg:generic/curl.se/curl@7.31.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-2u6v-6vm9-z3by"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3s4s-6c3v-7kgn"},{"vulnerability":"VCID-3xcn-bur1-tkdt"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-51ac-1jc2-vfed"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5xjw-u8ad-n3g5"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-6fv7-7u2t-gfgb"},{"vulnerability":"VCID-6rk4-vb5u-bkg6"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-8j6v-xbhy-7uc2"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-av4f-gxku-qbhp"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdar-9qhw-hke7"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-cmcn-f8ws-q3h2"},{"vulnerability":"VCID-cxy6-vzz9-w3ff"},{"vulnerability":"VCID-dndt-tapy-23d2"},{"vulnerability":"VCID-e4qf-7gqs-qyg3"},{"vulnerability":"VCID-f276-amhj-9yfx"},{"vulnerability":"VCID-f922-jx9w-mbc5"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gnur-763x-qkcu"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-nkmd-xb13-mbg9"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-p9v4-nweu-vydg"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8ja-keyk-fyfb"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-q9ht-ra39-kuef"},{"vulnerability":"VCID-qe9z-wuze-tucq"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-rfdp-gsgs-eubq"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-s2gu-8jpq-mub9"},{"vulnerability":"VCID-s6gu-gm97-fyfk"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sesh-938m-x3f8"},{"vulnerability":"VCID-snsg-c2up-b7cn"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-tyqp-e8cp-dbbm"},{"vulnerability":"VCID-ugrr-z2zv-6qgp"},{"vulnerability":"VCID-uh5a-zcds-3bcc"},{"vulnerability":"VCID-vfc1-yy11-bycp"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-xsnb-eujr-y7bz"},{"vulnerability":"VCID-xyze-msxs-1qem"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"},{"vulnerability":"VCID-zv25-wupq-bqfk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.31.0"}],"aliases":["CVE-2013-2174"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-hhu3-dp3m-gbgm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6857?format=json","vulnerability_id":"VCID-kkrm-dj79-4ucj","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27776","reference_id":"","reference_type":"","scores":[{"value":"0.00682","scoring_system":"epss","scoring_elements":"0.72057","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00682","scoring_system":"epss","scoring_elements":"0.72016","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27776"},{"reference_url":"https://curl.se/docs/CVE-2022-27776.html","reference_id":"","reference_type":"","scores":[{"value":"Low","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2022-27776.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://hackerone.com/reports/1547048","reference_id":"","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/"}],"url":"https://hackerone.com/reports/1547048"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010252","reference_id":"1010252","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010252"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2078408","reference_id":"2078408","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2078408"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/","reference_id":"7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/"},{"reference_url":"https://security.archlinux.org/AVG-2685","reference_id":"AVG-2685","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2685"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/","reference_id":"DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/"},{"reference_url":"https://www.debian.org/security/2022/dsa-5197","reference_id":"dsa-5197","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/"}],"url":"https://www.debian.org/security/2022/dsa-5197"},{"reference_url":"https://security.gentoo.org/glsa/202212-01","reference_id":"GLSA-202212-01","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/"}],"url":"https://security.gentoo.org/glsa/202212-01"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","reference_id":"msg00017.html","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220609-0008/","reference_id":"ntap-20220609-0008","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220609-0008/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5245","reference_id":"RHSA-2022:5245","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5245"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5313","reference_id":"RHSA-2022:5313","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5313"},{"reference_url":"https://usn.ubuntu.com/5397-1/","reference_id":"USN-5397-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5397-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137941?format=json","purl":"pkg:generic/curl.se/curl@7.83.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-287k-bzqy-n7ag"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3p2z-61gq-muhs"},{"vulnerability":"VCID-5m9y-9y57-kqg6"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6en5-etsd-2bce"},{"vulnerability":"VCID-6ggz-pa5t-77c4"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7z3h-9pk3-rqct"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-cfry-nx5h-kudv"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fcb7-8163-muf4"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h4nw-va5b-23ef"},{"vulnerability":"VCID-hb4z-s871-d7ck"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-k5vr-1fmp-sqbw"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mqzd-mcw5-s3h6"},{"vulnerability":"VCID-mray-vkqx-5ka7"},{"vulnerability":"VCID-ns58-vmsz-5ued"},{"vulnerability":"VCID-nwvb-d466-4uaa"},{"vulnerability":"VCID-p155-gbtu-abg1"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-razg-yr7y-ukgd"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-tzs5-qzhn-rqbk"},{"vulnerability":"VCID-u1p8-s8vm-3yer"},{"vulnerability":"VCID-v82t-s9e1-2fbw"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wbwx-5vg3-uqcd"},{"vulnerability":"VCID-wgur-psum-pbck"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.83.0"}],"aliases":["CVE-2022-27776"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-kkrm-dj79-4ucj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65689?format=json","vulnerability_id":"VCID-msd2-35g9-nyd2","summary":"A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8284.json","reference_id":"","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8284.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-8284","reference_id":"","reference_type":"","scores":[{"value":"0.00083","scoring_system":"epss","scoring_elements":"0.24369","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00083","scoring_system":"epss","scoring_elements":"0.24269","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-8284"},{"reference_url":"https://curl.se/docs/CVE-2020-8284.html","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Low","scoring_system":"cvssv3.1","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/"}],"url":"https://curl.se/docs/CVE-2020-8284.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://hackerone.com/reports/1040166","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/"}],"url":"https://hackerone.com/reports/1040166"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902667","reference_id":"1902667","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902667"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977163","reference_id":"977163","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977163"},{"reference_url":"https://security.archlinux.org/AVG-1337","reference_id":"AVG-1337","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1337"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/","reference_id":"DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/"},{"reference_url":"https://www.debian.org/security/2021/dsa-4881","reference_id":"dsa-4881","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/"}],"url":"https://www.debian.org/security/2021/dsa-4881"},{"reference_url":"https://security.gentoo.org/glsa/202012-14","reference_id":"GLSA-202012-14","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/"}],"url":"https://security.gentoo.org/glsa/202012-14"},{"reference_url":"https://support.apple.com/kb/HT212325","reference_id":"HT212325","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/"}],"url":"https://support.apple.com/kb/HT212325"},{"reference_url":"https://support.apple.com/kb/HT212326","reference_id":"HT212326","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/"}],"url":"https://support.apple.com/kb/HT212326"},{"reference_url":"https://support.apple.com/kb/HT212327","reference_id":"HT212327","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/"}],"url":"https://support.apple.com/kb/HT212327"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html","reference_id":"msg00029.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20210122-0007/","reference_id":"ntap-20210122-0007","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/"}],"url":"https://security.netapp.com/advisory/ntap-20210122-0007/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/","reference_id":"NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:1610","reference_id":"RHSA-2021:1610","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:1610"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:2471","reference_id":"RHSA-2021:2471","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:2471"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:2472","reference_id":"RHSA-2021:2472","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:2472"},{"reference_url":"https://usn.ubuntu.com/4665-1/","reference_id":"USN-4665-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4665-1/"},{"reference_url":"https://usn.ubuntu.com/4665-2/","reference_id":"USN-4665-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4665-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137929?format=json","purl":"pkg:generic/curl.se/curl@7.74.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6ggz-pa5t-77c4"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-7z3h-9pk3-rqct"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-byzw-xw9s-pkga"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-cfry-nx5h-kudv"},{"vulnerability":"VCID-cjyz-fdnv-b3g4"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fcb7-8163-muf4"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kn6z-caj8-bbc9"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-p155-gbtu-abg1"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-razg-yr7y-ukgd"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tzs5-qzhn-rqbk"},{"vulnerability":"VCID-urgp-rqyc-sqer"},{"vulnerability":"VCID-v82t-s9e1-2fbw"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wbwx-5vg3-uqcd"},{"vulnerability":"VCID-wgur-psum-pbck"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.74.0"}],"aliases":["CVE-2020-8284"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-msd2-35g9-nyd2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65673?format=json","vulnerability_id":"VCID-naac-snjw-qbad","summary":"libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-1000254","reference_id":"","reference_type":"","scores":[{"value":"0.01318","scoring_system":"epss","scoring_elements":"0.80206","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01318","scoring_system":"epss","scoring_elements":"0.8023","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-1000254"},{"reference_url":"https://curl.se/docs/CVE-2017-1000254.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2017-1000254.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"2.6","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:H/Au:N/C:N/I:N/A:P"},{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495541","reference_id":"1495541","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495541"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877671","reference_id":"877671","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877671"},{"reference_url":"https://security.archlinux.org/ASA-201710-2","reference_id":"ASA-201710-2","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201710-2"},{"reference_url":"https://security.archlinux.org/ASA-201710-3","reference_id":"ASA-201710-3","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201710-3"},{"reference_url":"https://security.archlinux.org/ASA-201710-4","reference_id":"ASA-201710-4","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201710-4"},{"reference_url":"https://security.archlinux.org/ASA-201710-5","reference_id":"ASA-201710-5","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201710-5"},{"reference_url":"https://security.archlinux.org/ASA-201710-6","reference_id":"ASA-201710-6","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201710-6"},{"reference_url":"https://security.archlinux.org/ASA-201710-7","reference_id":"ASA-201710-7","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201710-7"},{"reference_url":"https://security.archlinux.org/AVG-371","reference_id":"AVG-371","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-371"},{"reference_url":"https://security.archlinux.org/AVG-386","reference_id":"AVG-386","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-386"},{"reference_url":"https://security.archlinux.org/AVG-387","reference_id":"AVG-387","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-387"},{"reference_url":"https://security.archlinux.org/AVG-388","reference_id":"AVG-388","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-388"},{"reference_url":"https://security.archlinux.org/AVG-389","reference_id":"AVG-389","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-389"},{"reference_url":"https://security.archlinux.org/AVG-422","reference_id":"AVG-422","reference_type":"","scores":[{"value":"Low","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-422"},{"reference_url":"https://security.gentoo.org/glsa/201712-04","reference_id":"GLSA-201712-04","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201712-04"},{"reference_url":"https://usn.ubuntu.com/3441-1/","reference_id":"USN-3441-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3441-1/"},{"reference_url":"https://usn.ubuntu.com/3441-2/","reference_id":"USN-3441-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3441-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137899?format=json","purl":"pkg:generic/curl.se/curl@7.56.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-dj48-3dkt-dbdh"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kae8-wmf2-2kf1"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-p7mn-a632-c3ag"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-raxd-4nxj-gkhp"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-uj78-2cgz-zbdb"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-zg98-v6dj-s7gv"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.56.0"}],"aliases":["CVE-2017-1000254"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-naac-snjw-qbad"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65623?format=json","vulnerability_id":"VCID-nnv5-72sv-afbb","summary":"Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0490.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0490.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2005-0490","reference_id":"","reference_type":"","scores":[{"value":"0.02576","scoring_system":"epss","scoring_elements":"0.85834","published_at":"2026-06-04T12:55:00Z"},{"value":"0.02576","scoring_system":"epss","scoring_elements":"0.85856","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2005-0490"},{"reference_url":"https://curl.se/docs/CVE-2005-0490.html","reference_id":"","reference_type":"","scores":[{"value":"High","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2005-0490.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0490","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0490"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617532","reference_id":"1617532","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617532"},{"reference_url":"https://access.redhat.com/errata/RHSA-2005:340","reference_id":"RHSA-2005:340","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2005:340"},{"reference_url":"https://usn.ubuntu.com/86-1/","reference_id":"USN-86-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/86-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137808?format=json","purl":"pkg:generic/curl.se/curl@7.13.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-5xjw-u8ad-n3g5"},{"vulnerability":"VCID-64mt-9155-tkbv"},{"vulnerability":"VCID-6fv7-7u2t-gfgb"},{"vulnerability":"VCID-6rk4-vb5u-bkg6"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-8j6v-xbhy-7uc2"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-av4f-gxku-qbhp"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdar-9qhw-hke7"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-dndt-tapy-23d2"},{"vulnerability":"VCID-e4qf-7gqs-qyg3"},{"vulnerability":"VCID-f276-amhj-9yfx"},{"vulnerability":"VCID-f922-jx9w-mbc5"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g72q-eedp-aufb"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-hhu3-dp3m-gbgm"},{"vulnerability":"VCID-jwmh-kyed-1uca"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p178-tq2e-4ya4"},{"vulnerability":"VCID-p9v4-nweu-vydg"},{"vulnerability":"VCID-q2kb-mjg4-uba1"},{"vulnerability":"VCID-q8ja-keyk-fyfb"},{"vulnerability":"VCID-q9ht-ra39-kuef"},{"vulnerability":"VCID-qe9z-wuze-tucq"},{"vulnerability":"VCID-rfdp-gsgs-eubq"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-s2gu-8jpq-mub9"},{"vulnerability":"VCID-sesh-938m-x3f8"},{"vulnerability":"VCID-snsg-c2up-b7cn"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-tyqp-e8cp-dbbm"},{"vulnerability":"VCID-uh5a-zcds-3bcc"},{"vulnerability":"VCID-vfc1-yy11-bycp"},{"vulnerability":"VCID-vnqb-6t3e-rudt"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-wc29-pw8g-mkgj"},{"vulnerability":"VCID-xyze-msxs-1qem"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-y8yr-dfz4-67fp"},{"vulnerability":"VCID-zqyj-7rr3-fqew"},{"vulnerability":"VCID-zv25-wupq-bqfk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.13.1"}],"aliases":["CVE-2005-0490"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nnv5-72sv-afbb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65629?format=json","vulnerability_id":"VCID-q2kb-mjg4-uba1","summary":"lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2417.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2417.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2009-2417","reference_id":"","reference_type":"","scores":[{"value":"0.0733","scoring_system":"epss","scoring_elements":"0.91834","published_at":"2026-06-04T12:55:00Z"},{"value":"0.0733","scoring_system":"epss","scoring_elements":"0.91847","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2009-2417"},{"reference_url":"https://curl.se/docs/CVE-2009-2417.html","reference_id":"","reference_type":"","scores":[{"value":"High","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2009-2417.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2417","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2417"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=516181","reference_id":"516181","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=516181"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=541991","reference_id":"541991","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=541991"},{"reference_url":"https://security.gentoo.org/glsa/200909-20","reference_id":"GLSA-200909-20","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200909-20"},{"reference_url":"https://access.redhat.com/errata/RHSA-2009:1209","reference_id":"RHSA-2009:1209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2009:1209"},{"reference_url":"https://usn.ubuntu.com/1158-1/","reference_id":"USN-1158-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1158-1/"},{"reference_url":"https://usn.ubuntu.com/818-1/","reference_id":"USN-818-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/818-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137834?format=json","purl":"pkg:generic/curl.se/curl@7.19.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-2u6v-6vm9-z3by"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5xjw-u8ad-n3g5"},{"vulnerability":"VCID-64mt-9155-tkbv"},{"vulnerability":"VCID-6fv7-7u2t-gfgb"},{"vulnerability":"VCID-6rk4-vb5u-bkg6"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-8j6v-xbhy-7uc2"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-av4f-gxku-qbhp"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdar-9qhw-hke7"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-dndt-tapy-23d2"},{"vulnerability":"VCID-e4qf-7gqs-qyg3"},{"vulnerability":"VCID-f276-amhj-9yfx"},{"vulnerability":"VCID-f922-jx9w-mbc5"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g72q-eedp-aufb"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-hhu3-dp3m-gbgm"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-nkmd-xb13-mbg9"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-p9v4-nweu-vydg"},{"vulnerability":"VCID-q8ja-keyk-fyfb"},{"vulnerability":"VCID-q9ht-ra39-kuef"},{"vulnerability":"VCID-qe9z-wuze-tucq"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-rfdp-gsgs-eubq"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-s2gu-8jpq-mub9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sesh-938m-x3f8"},{"vulnerability":"VCID-snsg-c2up-b7cn"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-tyqp-e8cp-dbbm"},{"vulnerability":"VCID-ugrr-z2zv-6qgp"},{"vulnerability":"VCID-uh5a-zcds-3bcc"},{"vulnerability":"VCID-vfc1-yy11-bycp"},{"vulnerability":"VCID-vnqb-6t3e-rudt"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-wc29-pw8g-mkgj"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-xyze-msxs-1qem"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"},{"vulnerability":"VCID-zv25-wupq-bqfk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.19.6"}],"aliases":["CVE-2009-2417"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-q2kb-mjg4-uba1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65622?format=json","vulnerability_id":"VCID-q2wq-jd4k-8kdr","summary":"curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2003-1605","reference_id":"","reference_type":"","scores":[{"value":"0.00379","scoring_system":"epss","scoring_elements":"0.59711","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00379","scoring_system":"epss","scoring_elements":"0.5976","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2003-1605"},{"reference_url":"https://curl.se/docs/CVE-2003-1605.html","reference_id":"","reference_type":"","scores":[{"value":"High","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2003-1605.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1605","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1605"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137988?format=json","purl":"pkg:generic/curl.se/curl@7.10.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-5xjw-u8ad-n3g5"},{"vulnerability":"VCID-64mt-9155-tkbv"},{"vulnerability":"VCID-6fv7-7u2t-gfgb"},{"vulnerability":"VCID-6rk4-vb5u-bkg6"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-8j6v-xbhy-7uc2"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-av4f-gxku-qbhp"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-cdar-9qhw-hke7"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-dndt-tapy-23d2"},{"vulnerability":"VCID-e4qf-7gqs-qyg3"},{"vulnerability":"VCID-f276-amhj-9yfx"},{"vulnerability":"VCID-f922-jx9w-mbc5"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g72q-eedp-aufb"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-hhu3-dp3m-gbgm"},{"vulnerability":"VCID-jwmh-kyed-1uca"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-nnv5-72sv-afbb"},{"vulnerability":"VCID-p9v4-nweu-vydg"},{"vulnerability":"VCID-q2kb-mjg4-uba1"},{"vulnerability":"VCID-q9ht-ra39-kuef"},{"vulnerability":"VCID-qe9z-wuze-tucq"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-sesh-938m-x3f8"},{"vulnerability":"VCID-snsg-c2up-b7cn"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tyqp-e8cp-dbbm"},{"vulnerability":"VCID-uh5a-zcds-3bcc"},{"vulnerability":"VCID-vfc1-yy11-bycp"},{"vulnerability":"VCID-vnqb-6t3e-rudt"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-wc29-pw8g-mkgj"},{"vulnerability":"VCID-xyze-msxs-1qem"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-y8yr-dfz4-67fp"},{"vulnerability":"VCID-zqyj-7rr3-fqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.10.7"}],"aliases":["CVE-2003-1605"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-q2wq-jd4k-8kdr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6746?format=json","vulnerability_id":"VCID-qe9z-wuze-tucq","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8616.json","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8616.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8616","reference_id":"","reference_type":"","scores":[{"value":"0.04507","scoring_system":"epss","scoring_elements":"0.89342","published_at":"2026-06-05T12:55:00Z"},{"value":"0.04507","scoring_system":"epss","scoring_elements":"0.89324","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8616"},{"reference_url":"https://curl.se/docs/CVE-2016-8616.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2016-8616.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"1.9","scoring_system":"cvssv2","scoring_elements":"AV:L/AC:M/Au:N/C:P/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388371","reference_id":"1388371","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388371"},{"reference_url":"https://security.archlinux.org/ASA-201611-10","reference_id":"ASA-201611-10","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-10"},{"reference_url":"https://security.archlinux.org/ASA-201611-4","reference_id":"ASA-201611-4","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-4"},{"reference_url":"https://security.archlinux.org/ASA-201611-5","reference_id":"ASA-201611-5","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-5"},{"reference_url":"https://security.archlinux.org/ASA-201611-7","reference_id":"ASA-201611-7","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-7"},{"reference_url":"https://security.archlinux.org/ASA-201611-8","reference_id":"ASA-201611-8","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-8"},{"reference_url":"https://security.archlinux.org/ASA-201611-9","reference_id":"ASA-201611-9","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-9"},{"reference_url":"https://security.archlinux.org/AVG-60","reference_id":"AVG-60","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-60"},{"reference_url":"https://security.archlinux.org/AVG-61","reference_id":"AVG-61","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-61"},{"reference_url":"https://security.archlinux.org/AVG-62","reference_id":"AVG-62","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-62"},{"reference_url":"https://security.archlinux.org/AVG-63","reference_id":"AVG-63","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-63"},{"reference_url":"https://security.archlinux.org/AVG-65","reference_id":"AVG-65","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-65"},{"reference_url":"https://security.archlinux.org/AVG-66","reference_id":"AVG-66","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-66"},{"reference_url":"https://security.gentoo.org/glsa/201701-47","reference_id":"GLSA-201701-47","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-47"},{"reference_url":"https://usn.ubuntu.com/3123-1/","reference_id":"USN-3123-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3123-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137889?format=json","purl":"pkg:generic/curl.se/curl@7.51.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-raxd-4nxj-gkhp"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0"}],"aliases":["CVE-2016-8616"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qe9z-wuze-tucq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65681?format=json","vulnerability_id":"VCID-rt5e-saz2-j7c9","summary":"libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-1000007","reference_id":"","reference_type":"","scores":[{"value":"0.03854","scoring_system":"epss","scoring_elements":"0.88416","published_at":"2026-06-04T12:55:00Z"},{"value":"0.03854","scoring_system":"epss","scoring_elements":"0.88434","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-1000007"},{"reference_url":"https://curl.se/docs/CVE-2018-1000007.html","reference_id":"","reference_type":"","scores":[{"value":"Low","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2018-1000007.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000007","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000007"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537125","reference_id":"1537125","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537125"},{"reference_url":"https://security.archlinux.org/ASA-201801-20","reference_id":"ASA-201801-20","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201801-20"},{"reference_url":"https://security.archlinux.org/ASA-201801-22","reference_id":"ASA-201801-22","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201801-22"},{"reference_url":"https://security.archlinux.org/ASA-201801-23","reference_id":"ASA-201801-23","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201801-23"},{"reference_url":"https://security.archlinux.org/ASA-201801-24","reference_id":"ASA-201801-24","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201801-24"},{"reference_url":"https://security.archlinux.org/ASA-201801-25","reference_id":"ASA-201801-25","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201801-25"},{"reference_url":"https://security.archlinux.org/ASA-201801-26","reference_id":"ASA-201801-26","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201801-26"},{"reference_url":"https://security.archlinux.org/AVG-593","reference_id":"AVG-593","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-593"},{"reference_url":"https://security.archlinux.org/AVG-594","reference_id":"AVG-594","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-594"},{"reference_url":"https://security.archlinux.org/AVG-595","reference_id":"AVG-595","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-595"},{"reference_url":"https://security.archlinux.org/AVG-596","reference_id":"AVG-596","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-596"},{"reference_url":"https://security.archlinux.org/AVG-597","reference_id":"AVG-597","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-597"},{"reference_url":"https://security.archlinux.org/AVG-598","reference_id":"AVG-598","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-598"},{"reference_url":"https://security.gentoo.org/glsa/201804-04","reference_id":"GLSA-201804-04","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201804-04"},{"reference_url":"https://usn.ubuntu.com/3554-1/","reference_id":"USN-3554-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3554-1/"},{"reference_url":"https://usn.ubuntu.com/3554-2/","reference_id":"USN-3554-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3554-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137903?format=json","purl":"pkg:generic/curl.se/curl@7.58.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-cfry-nx5h-kudv"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fcb7-8163-muf4"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kae8-wmf2-2kf1"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-p7mn-a632-c3ag"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-uj78-2cgz-zbdb"},{"vulnerability":"VCID-v82t-s9e1-2fbw"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wbwx-5vg3-uqcd"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-zg98-v6dj-s7gv"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.58.0"}],"aliases":["CVE-2018-1000007"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rt5e-saz2-j7c9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6744?format=json","vulnerability_id":"VCID-sesh-938m-x3f8","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8618","reference_id":"","reference_type":"","scores":[{"value":"0.01811","scoring_system":"epss","scoring_elements":"0.83202","published_at":"2026-06-05T12:55:00Z"},{"value":"0.01811","scoring_system":"epss","scoring_elements":"0.83176","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8618"},{"reference_url":"https://curl.se/docs/CVE-2016-8618.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2016-8618.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.1","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:H/Au:N/C:P/I:P/A:P"},{"value":"6.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388378","reference_id":"1388378","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388378"},{"reference_url":"https://security.archlinux.org/ASA-201611-10","reference_id":"ASA-201611-10","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-10"},{"reference_url":"https://security.archlinux.org/ASA-201611-4","reference_id":"ASA-201611-4","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-4"},{"reference_url":"https://security.archlinux.org/ASA-201611-5","reference_id":"ASA-201611-5","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-5"},{"reference_url":"https://security.archlinux.org/AVG-61","reference_id":"AVG-61","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-61"},{"reference_url":"https://security.archlinux.org/AVG-63","reference_id":"AVG-63","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-63"},{"reference_url":"https://security.archlinux.org/AVG-66","reference_id":"AVG-66","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-66"},{"reference_url":"https://security.gentoo.org/glsa/201701-47","reference_id":"GLSA-201701-47","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-47"},{"reference_url":"https://usn.ubuntu.com/3123-1/","reference_id":"USN-3123-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3123-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137889?format=json","purl":"pkg:generic/curl.se/curl@7.51.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-raxd-4nxj-gkhp"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0"}],"aliases":["CVE-2016-8618"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sesh-938m-x3f8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65706?format=json","vulnerability_id":"VCID-sutv-qt2x-2yc7","summary":"An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28322.json","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28322.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-28322","reference_id":"","reference_type":"","scores":[{"value":"0.00631","scoring_system":"epss","scoring_elements":"0.70725","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-28322"},{"reference_url":"https://curl.se/docs/CVE-2023-28322.html","reference_id":"","reference_type":"","scores":[{"value":"Low","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2023-28322.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://hackerone.com/reports/1954658","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/"}],"url":"https://hackerone.com/reports/1954658"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239","reference_id":"1036239","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196793","reference_id":"2196793","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196793"},{"reference_url":"http://seclists.org/fulldisclosure/2023/Jul/47","reference_id":"47","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/"}],"url":"http://seclists.org/fulldisclosure/2023/Jul/47"},{"reference_url":"http://seclists.org/fulldisclosure/2023/Jul/48","reference_id":"48","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/"}],"url":"http://seclists.org/fulldisclosure/2023/Jul/48"},{"reference_url":"http://seclists.org/fulldisclosure/2023/Jul/52","reference_id":"52","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/"}],"url":"http://seclists.org/fulldisclosure/2023/Jul/52"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/","reference_id":"F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/"},{"reference_url":"https://security.gentoo.org/glsa/202310-12","reference_id":"GLSA-202310-12","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/"}],"url":"https://security.gentoo.org/glsa/202310-12"},{"reference_url":"https://support.apple.com/kb/HT213843","reference_id":"HT213843","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/"}],"url":"https://support.apple.com/kb/HT213843"},{"reference_url":"https://support.apple.com/kb/HT213844","reference_id":"HT213844","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/"}],"url":"https://support.apple.com/kb/HT213844"},{"reference_url":"https://support.apple.com/kb/HT213845","reference_id":"HT213845","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/"}],"url":"https://support.apple.com/kb/HT213845"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html","reference_id":"msg00015.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20230609-0009/","reference_id":"ntap-20230609-0009","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/"}],"url":"https://security.netapp.com/advisory/ntap-20230609-0009/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:4354","reference_id":"RHSA-2023:4354","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:4354"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:4628","reference_id":"RHSA-2023:4628","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:4628"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:4629","reference_id":"RHSA-2023:4629","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:4629"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:5598","reference_id":"RHSA-2023:5598","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:5598"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:0428","reference_id":"RHSA-2024:0428","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:0428"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:0585","reference_id":"RHSA-2024:0585","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:0585"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:1601","reference_id":"RHSA-2024:1601","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:1601"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2092","reference_id":"RHSA-2024:2092","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2092"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2093","reference_id":"RHSA-2024:2093","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2093"},{"reference_url":"https://usn.ubuntu.com/6237-1/","reference_id":"USN-6237-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6237-1/"},{"reference_url":"https://usn.ubuntu.com/6237-3/","reference_id":"USN-6237-3","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6237-3/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/","reference_id":"Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137952?format=json","purl":"pkg:generic/curl.se/curl@8.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3p2z-61gq-muhs"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6ggz-pa5t-77c4"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-85qb-zec7-subc"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fcb7-8163-muf4"},{"vulnerability":"VCID-ffmg-djmk-57hn"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gux4-dncg-h7a6"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-k3nv-gf9b-5ua2"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-p155-gbtu-abg1"},{"vulnerability":"VCID-razg-yr7y-ukgd"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-u1p8-s8vm-3yer"},{"vulnerability":"VCID-v82t-s9e1-2fbw"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wgur-psum-pbck"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.1.0"}],"aliases":["CVE-2023-28322"],"risk_score":1.6,"exploitability":"0.5","weighted_severity":"3.3","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sutv-qt2x-2yc7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65644?format=json","vulnerability_id":"VCID-uh5a-zcds-3bcc","summary":"cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3613.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3613.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-3613","reference_id":"","reference_type":"","scores":[{"value":"0.0182","scoring_system":"epss","scoring_elements":"0.83211","published_at":"2026-06-04T12:55:00Z"},{"value":"0.0182","scoring_system":"epss","scoring_elements":"0.83237","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-3613"},{"reference_url":"https://curl.se/docs/CVE-2014-3613.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2014-3613.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3613","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3613"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1136154","reference_id":"1136154","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1136154"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:1254","reference_id":"RHSA-2015:1254","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:1254"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:2159","reference_id":"RHSA-2015:2159","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:2159"},{"reference_url":"https://usn.ubuntu.com/2346-1/","reference_id":"USN-2346-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2346-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137868?format=json","purl":"pkg:generic/curl.se/curl@7.38.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1y6d-7vfu-ybb3"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-2u6v-6vm9-z3by"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3s4s-6c3v-7kgn"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-3xcn-bur1-tkdt"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-51ac-1jc2-vfed"},{"vulnerability":"VCID-5sem-gndf-97e6"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5xjw-u8ad-n3g5"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-6fv7-7u2t-gfgb"},{"vulnerability":"VCID-6rk4-vb5u-bkg6"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-8j6v-xbhy-7uc2"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-av4f-gxku-qbhp"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdar-9qhw-hke7"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-dndt-tapy-23d2"},{"vulnerability":"VCID-f276-amhj-9yfx"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f922-jx9w-mbc5"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-mq44-5pmp-2qhh"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-p9v4-nweu-vydg"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8ja-keyk-fyfb"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qe9z-wuze-tucq"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-rfdp-gsgs-eubq"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-s2gu-8jpq-mub9"},{"vulnerability":"VCID-s6gu-gm97-fyfk"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sesh-938m-x3f8"},{"vulnerability":"VCID-snsg-c2up-b7cn"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-ugrr-z2zv-6qgp"},{"vulnerability":"VCID-vfc1-yy11-bycp"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-xyze-msxs-1qem"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"},{"vulnerability":"VCID-zv25-wupq-bqfk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.38.0"}],"aliases":["CVE-2014-3613"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-uh5a-zcds-3bcc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6743?format=json","vulnerability_id":"VCID-vfc1-yy11-bycp","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8619","reference_id":"","reference_type":"","scores":[{"value":"0.03314","scoring_system":"epss","scoring_elements":"0.87506","published_at":"2026-06-05T12:55:00Z"},{"value":"0.03314","scoring_system":"epss","scoring_elements":"0.87485","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8619"},{"reference_url":"https://curl.se/docs/CVE-2016-8619.html","reference_id":"","reference_type":"","scores":[{"value":"High","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2016-8619.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:P"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388379","reference_id":"1388379","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388379"},{"reference_url":"https://security.archlinux.org/ASA-201611-10","reference_id":"ASA-201611-10","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-10"},{"reference_url":"https://security.archlinux.org/ASA-201611-4","reference_id":"ASA-201611-4","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-4"},{"reference_url":"https://security.archlinux.org/ASA-201611-5","reference_id":"ASA-201611-5","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-5"},{"reference_url":"https://security.archlinux.org/ASA-201611-7","reference_id":"ASA-201611-7","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-7"},{"reference_url":"https://security.archlinux.org/ASA-201611-8","reference_id":"ASA-201611-8","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-8"},{"reference_url":"https://security.archlinux.org/ASA-201611-9","reference_id":"ASA-201611-9","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-9"},{"reference_url":"https://security.archlinux.org/AVG-60","reference_id":"AVG-60","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-60"},{"reference_url":"https://security.archlinux.org/AVG-61","reference_id":"AVG-61","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-61"},{"reference_url":"https://security.archlinux.org/AVG-62","reference_id":"AVG-62","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-62"},{"reference_url":"https://security.archlinux.org/AVG-63","reference_id":"AVG-63","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-63"},{"reference_url":"https://security.archlinux.org/AVG-65","reference_id":"AVG-65","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-65"},{"reference_url":"https://security.archlinux.org/AVG-66","reference_id":"AVG-66","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-66"},{"reference_url":"https://security.gentoo.org/glsa/201701-47","reference_id":"GLSA-201701-47","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-47"},{"reference_url":"https://usn.ubuntu.com/3123-1/","reference_id":"USN-3123-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3123-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137889?format=json","purl":"pkg:generic/curl.se/curl@7.51.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-raxd-4nxj-gkhp"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0"}],"aliases":["CVE-2016-8619"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vfc1-yy11-bycp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/4858?format=json","vulnerability_id":"VCID-w472-84ep-fkdx","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38546.json","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38546.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-38546","reference_id":"","reference_type":"","scores":[{"value":"0.00441","scoring_system":"epss","scoring_elements":"0.63576","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-38546"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://hackerone.com/reports/2148242","reference_id":"","reference_type":"","scores":[],"url":"https://hackerone.com/reports/2148242"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241938","reference_id":"2241938","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241938"},{"reference_url":"http://seclists.org/fulldisclosure/2024/Jan/34","reference_id":"34","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/"}],"url":"http://seclists.org/fulldisclosure/2024/Jan/34"},{"reference_url":"http://seclists.org/fulldisclosure/2024/Jan/37","reference_id":"37","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/"}],"url":"http://seclists.org/fulldisclosure/2024/Jan/37"},{"reference_url":"http://seclists.org/fulldisclosure/2024/Jan/38","reference_id":"38","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/"}],"url":"http://seclists.org/fulldisclosure/2024/Jan/38"},{"reference_url":"https://security.archlinux.org/AVG-2845","reference_id":"AVG-2845","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2845"},{"reference_url":"https://security.archlinux.org/AVG-2846","reference_id":"AVG-2846","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2846"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38546","reference_id":"CVE-2023-38546","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38546"},{"reference_url":"https://curl.se/docs/CVE-2023-38546.html","reference_id":"CVE-2023-38546.HTML","reference_type":"","scores":[{"value":"Low","scoring_system":"cvssv3.1","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/"}],"url":"https://curl.se/docs/CVE-2023-38546.html"},{"reference_url":"https://security.gentoo.org/glsa/202310-12","reference_id":"GLSA-202310-12","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202310-12"},{"reference_url":"https://support.apple.com/kb/HT214036","reference_id":"HT214036","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/"}],"url":"https://support.apple.com/kb/HT214036"},{"reference_url":"https://support.apple.com/kb/HT214057","reference_id":"HT214057","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/"}],"url":"https://support.apple.com/kb/HT214057"},{"reference_url":"https://support.apple.com/kb/HT214058","reference_id":"HT214058","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/"}],"url":"https://support.apple.com/kb/HT214058"},{"reference_url":"https://support.apple.com/kb/HT214063","reference_id":"HT214063","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/"}],"url":"https://support.apple.com/kb/HT214063"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/","reference_id":"OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:5700","reference_id":"RHSA-2023:5700","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:5700"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:5763","reference_id":"RHSA-2023:5763","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:5763"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6292","reference_id":"RHSA-2023:6292","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6292"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6745","reference_id":"RHSA-2023:6745","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6745"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:7540","reference_id":"RHSA-2023:7540","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:7540"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:7625","reference_id":"RHSA-2023:7625","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:7625"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:7626","reference_id":"RHSA-2023:7626","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:7626"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:1601","reference_id":"RHSA-2024:1601","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:1601"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2092","reference_id":"RHSA-2024:2092","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2092"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2093","reference_id":"RHSA-2024:2093","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2093"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2101","reference_id":"RHSA-2024:2101","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2101"},{"reference_url":"https://usn.ubuntu.com/6429-1/","reference_id":"USN-6429-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6429-1/"},{"reference_url":"https://usn.ubuntu.com/6429-2/","reference_id":"USN-6429-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6429-2/"},{"reference_url":"https://usn.ubuntu.com/6429-3/","reference_id":"USN-6429-3","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6429-3/"},{"reference_url":"https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868","reference_id":"viewtopic.php?f=8&t=8868","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/"}],"url":"https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137958?format=json","purl":"pkg:generic/curl.se/curl@8.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3p2z-61gq-muhs"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6ggz-pa5t-77c4"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-85qb-zec7-subc"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fcb7-8163-muf4"},{"vulnerability":"VCID-ffmg-djmk-57hn"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gux4-dncg-h7a6"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-p155-gbtu-abg1"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-u1p8-s8vm-3yer"},{"vulnerability":"VCID-v82t-s9e1-2fbw"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wgur-psum-pbck"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.4.0"}],"aliases":["CVE-2023-38546"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-w472-84ep-fkdx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6745?format=json","vulnerability_id":"VCID-xyze-msxs-1qem","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json","reference_id":"","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8617","reference_id":"","reference_type":"","scores":[{"value":"0.00085","scoring_system":"epss","scoring_elements":"0.24771","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00085","scoring_system":"epss","scoring_elements":"0.24672","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8617"},{"reference_url":"https://curl.se/docs/CVE-2016-8617.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2016-8617.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv2","scoring_elements":"AV:L/AC:H/Au:N/C:P/I:P/A:P"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"http://www.securitytracker.com/id/1037192","reference_id":"1037192","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/"}],"url":"http://www.securitytracker.com/id/1037192"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388377","reference_id":"1388377","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388377"},{"reference_url":"http://www.securityfocus.com/bid/94097","reference_id":"94097","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/"}],"url":"http://www.securityfocus.com/bid/94097"},{"reference_url":"https://curl.haxx.se/docs/adv_20161102C.html","reference_id":"adv_20161102C.html","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/"}],"url":"https://curl.haxx.se/docs/adv_20161102C.html"},{"reference_url":"https://security.archlinux.org/ASA-201611-10","reference_id":"ASA-201611-10","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-10"},{"reference_url":"https://security.archlinux.org/ASA-201611-4","reference_id":"ASA-201611-4","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-4"},{"reference_url":"https://security.archlinux.org/ASA-201611-5","reference_id":"ASA-201611-5","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-5"},{"reference_url":"https://security.archlinux.org/ASA-201611-7","reference_id":"ASA-201611-7","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-7"},{"reference_url":"https://security.archlinux.org/ASA-201611-8","reference_id":"ASA-201611-8","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-8"},{"reference_url":"https://security.archlinux.org/ASA-201611-9","reference_id":"ASA-201611-9","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201611-9"},{"reference_url":"https://security.archlinux.org/AVG-60","reference_id":"AVG-60","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-60"},{"reference_url":"https://security.archlinux.org/AVG-61","reference_id":"AVG-61","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-61"},{"reference_url":"https://security.archlinux.org/AVG-62","reference_id":"AVG-62","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-62"},{"reference_url":"https://security.archlinux.org/AVG-63","reference_id":"AVG-63","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-63"},{"reference_url":"https://security.archlinux.org/AVG-65","reference_id":"AVG-65","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-65"},{"reference_url":"https://security.archlinux.org/AVG-66","reference_id":"AVG-66","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-66"},{"reference_url":"https://curl.haxx.se/CVE-2016-8617.patch","reference_id":"CVE-2016-8617.patch","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/"}],"url":"https://curl.haxx.se/CVE-2016-8617.patch"},{"reference_url":"https://security.gentoo.org/glsa/201701-47","reference_id":"GLSA-201701-47","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/"}],"url":"https://security.gentoo.org/glsa/201701-47"},{"reference_url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","reference_id":"r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/"}],"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","reference_id":"rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/"}],"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8617","reference_id":"show_bug.cgi?id=CVE-2016-8617","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/"}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8617"},{"reference_url":"https://www.tenable.com/security/tns-2016-21","reference_id":"tns-2016-21","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/"}],"url":"https://www.tenable.com/security/tns-2016-21"},{"reference_url":"https://usn.ubuntu.com/3123-1/","reference_id":"USN-3123-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3123-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137889?format=json","purl":"pkg:generic/curl.se/curl@7.51.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jf17-h97b-6bak"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-raxd-4nxj-gkhp"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-z8ex-47nd-47cm"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0"}],"aliases":["CVE-2016-8617"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-xyze-msxs-1qem"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65103?format=json","vulnerability_id":"VCID-y44u-23he-aya8","summary":"curl: curl: Unauthorized access due to improper HTTP proxy connection reuse","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3784.json","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3784.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-3784","reference_id":"","reference_type":"","scores":[{"value":"0.00025","scoring_system":"epss","scoring_elements":"0.07339","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-3784"},{"reference_url":"https://curl.se/docs/CVE-2026-3784.html","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Low","scoring_system":"cvssv3.1","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-11T15:48:38Z/"}],"url":"https://curl.se/docs/CVE-2026-3784.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3784","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3784"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://hackerone.com/reports/3584903","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-11T15:48:38Z/"}],"url":"https://hackerone.com/reports/3584903"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2446449","reference_id":"2446449","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2446449"},{"reference_url":"https://curl.se/docs/CVE-2026-3784.json","reference_id":"CVE-2026-3784.json","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-11T15:48:38Z/"}],"url":"https://curl.se/docs/CVE-2026-3784.json"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6893","reference_id":"RHSA-2026:6893","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6893"},{"reference_url":"https://usn.ubuntu.com/8084-1/","reference_id":"USN-8084-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8084-1/"},{"reference_url":"https://usn.ubuntu.com/8099-1/","reference_id":"USN-8099-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8099-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137979?format=json","purl":"pkg:generic/curl.se/curl@8.19.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-9vbs-w124-q3au"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wgur-psum-pbck"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.19.0"}],"aliases":["CVE-2026-3784"],"risk_score":3.0,"exploitability":"0.5","weighted_severity":"5.9","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-y44u-23he-aya8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65628?format=json","vulnerability_id":"VCID-y8yr-dfz4-67fp","summary":"The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0037.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0037.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2009-0037","reference_id":"","reference_type":"","scores":[{"value":"0.09919","scoring_system":"epss","scoring_elements":"0.93158","published_at":"2026-06-04T12:55:00Z"},{"value":"0.09919","scoring_system":"epss","scoring_elements":"0.93169","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2009-0037"},{"reference_url":"https://curl.se/docs/CVE-2009-0037.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2009-0037.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0037","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0037"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=485271","reference_id":"485271","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=485271"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518423","reference_id":"518423","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518423"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/32834.txt","reference_id":"CVE-2009-0037;OSVDB-53572","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/32834.txt"},{"reference_url":"https://www.securityfocus.com/bid/33962/info","reference_id":"CVE-2009-0037;OSVDB-53572","reference_type":"exploit","scores":[],"url":"https://www.securityfocus.com/bid/33962/info"},{"reference_url":"https://security.gentoo.org/glsa/200903-21","reference_id":"GLSA-200903-21","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200903-21"},{"reference_url":"https://access.redhat.com/errata/RHSA-2009:0341","reference_id":"RHSA-2009:0341","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2009:0341"},{"reference_url":"https://usn.ubuntu.com/726-1/","reference_id":"USN-726-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/726-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137832?format=json","purl":"pkg:generic/curl.se/curl@7.19.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1b5g-9trz-7ufb"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-2u6v-6vm9-z3by"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5xjw-u8ad-n3g5"},{"vulnerability":"VCID-64mt-9155-tkbv"},{"vulnerability":"VCID-6fv7-7u2t-gfgb"},{"vulnerability":"VCID-6rk4-vb5u-bkg6"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-8j6v-xbhy-7uc2"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-av4f-gxku-qbhp"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdar-9qhw-hke7"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-dndt-tapy-23d2"},{"vulnerability":"VCID-e4qf-7gqs-qyg3"},{"vulnerability":"VCID-f276-amhj-9yfx"},{"vulnerability":"VCID-f922-jx9w-mbc5"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g72q-eedp-aufb"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-hhu3-dp3m-gbgm"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-nkmd-xb13-mbg9"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-p9v4-nweu-vydg"},{"vulnerability":"VCID-q2kb-mjg4-uba1"},{"vulnerability":"VCID-q8ja-keyk-fyfb"},{"vulnerability":"VCID-q9ht-ra39-kuef"},{"vulnerability":"VCID-qe9z-wuze-tucq"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-rfdp-gsgs-eubq"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-s2gu-8jpq-mub9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sesh-938m-x3f8"},{"vulnerability":"VCID-snsg-c2up-b7cn"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-tyqp-e8cp-dbbm"},{"vulnerability":"VCID-uh5a-zcds-3bcc"},{"vulnerability":"VCID-vfc1-yy11-bycp"},{"vulnerability":"VCID-vnqb-6t3e-rudt"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-wc29-pw8g-mkgj"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-xyze-msxs-1qem"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-zg98-v6dj-s7gv"},{"vulnerability":"VCID-zqyj-7rr3-fqew"},{"vulnerability":"VCID-zv25-wupq-bqfk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.19.4"}],"aliases":["CVE-2009-0037"],"risk_score":9.6,"exploitability":"2.0","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-y8yr-dfz4-67fp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/65677?format=json","vulnerability_id":"VCID-zqyj-7rr3-fqew","summary":"The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json","reference_id":"","reference_type":"","scores":[{"value":"2.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-7407","reference_id":"","reference_type":"","scores":[{"value":"0.00201","scoring_system":"epss","scoring_elements":"0.4215","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00201","scoring_system":"epss","scoring_elements":"0.42076","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-7407"},{"reference_url":"https://curl.se/docs/CVE-2017-7407.html","reference_id":"","reference_type":"","scores":[{"value":"Medium","scoring_system":"cvssv3.1","scoring_elements":""}],"url":"https://curl.se/docs/CVE-2017-7407.html"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7407","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7407"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"1","scoring_system":"cvssv2","scoring_elements":"AV:L/AC:H/Au:S/C:P/I:N/A:N"},{"value":"2.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439190","reference_id":"1439190","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439190"},{"reference_url":"https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13","reference_id":"1890d59905414ab84a35892b2e45833654aa5c13","reference_type":"","scores":[{"value":"2.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:44:34Z/"}],"url":"https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859500","reference_id":"859500","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859500"},{"reference_url":"https://security.gentoo.org/glsa/201709-14","reference_id":"GLSA-201709-14","reference_type":"","scores":[{"value":"2.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:44:34Z/"}],"url":"https://security.gentoo.org/glsa/201709-14"},{"reference_url":"https://usn.ubuntu.com/3441-1/","reference_id":"USN-3441-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3441-1/"},{"reference_url":"https://usn.ubuntu.com/3441-2/","reference_id":"USN-3441-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3441-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/137895?format=json","purl":"pkg:generic/curl.se/curl@7.54.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-15sy-wmte-h3ae"},{"vulnerability":"VCID-18p4-rvxz-pkeu"},{"vulnerability":"VCID-1a1k-d4ez-ybdu"},{"vulnerability":"VCID-1dw3-33ju-jkbs"},{"vulnerability":"VCID-1kpz-55f1-f7dj"},{"vulnerability":"VCID-1m1w-rayk-sffe"},{"vulnerability":"VCID-1zsv-4jdy-63en"},{"vulnerability":"VCID-21ff-tazv-9ud3"},{"vulnerability":"VCID-27bv-f11z-myak"},{"vulnerability":"VCID-39qh-jayw-g3dh"},{"vulnerability":"VCID-3ws4-1sak-r3ck"},{"vulnerability":"VCID-4hha-2z31-2bf8"},{"vulnerability":"VCID-4zcd-rbx3-qye5"},{"vulnerability":"VCID-58p5-pfy3-xug1"},{"vulnerability":"VCID-5svr-3vv9-mqea"},{"vulnerability":"VCID-5ujs-47hf-g7gj"},{"vulnerability":"VCID-5un8-xymy-37bt"},{"vulnerability":"VCID-6745-tyba-33fa"},{"vulnerability":"VCID-738z-myg9-37hr"},{"vulnerability":"VCID-7jrx-ykk8-h3gp"},{"vulnerability":"VCID-7wqd-99h2-e7hk"},{"vulnerability":"VCID-7yvu-s3p2-sfhc"},{"vulnerability":"VCID-a58z-fu87-9ybs"},{"vulnerability":"VCID-a8z6-bswu-jue8"},{"vulnerability":"VCID-am31-t2h3-zbgw"},{"vulnerability":"VCID-azcz-b8f2-63be"},{"vulnerability":"VCID-bb6v-z8yg-6fe3"},{"vulnerability":"VCID-bcuq-n4vb-k7f3"},{"vulnerability":"VCID-bx2m-n5ft-3be8"},{"vulnerability":"VCID-cdzf-3ydt-8bdk"},{"vulnerability":"VCID-f7n8-zzhz-fuc8"},{"vulnerability":"VCID-f8vu-23bb-5ue7"},{"vulnerability":"VCID-f9nm-d5ax-qkcb"},{"vulnerability":"VCID-fhc8-r8gv-bugj"},{"vulnerability":"VCID-g4n9-kg3s-pfcr"},{"vulnerability":"VCID-g7ux-4vz2-ckfg"},{"vulnerability":"VCID-gud1-yg9u-zyfp"},{"vulnerability":"VCID-gueb-wzpx-ufb2"},{"vulnerability":"VCID-h6xj-mys4-pucf"},{"vulnerability":"VCID-hhms-2hg6-nke9"},{"vulnerability":"VCID-j688-cyfg-p7gu"},{"vulnerability":"VCID-jnq1-hk6d-b3a3"},{"vulnerability":"VCID-kkrm-dj79-4ucj"},{"vulnerability":"VCID-kq38-7s5x-nqaz"},{"vulnerability":"VCID-mh96-gkf1-9uek"},{"vulnerability":"VCID-msd2-35g9-nyd2"},{"vulnerability":"VCID-naac-snjw-qbad"},{"vulnerability":"VCID-p8vk-yf66-wbb7"},{"vulnerability":"VCID-p97a-kjpp-f3d8"},{"vulnerability":"VCID-q46r-7nct-s3bw"},{"vulnerability":"VCID-q8tg-prj1-y7b8"},{"vulnerability":"VCID-qrnc-7ywu-37cz"},{"vulnerability":"VCID-r2g9-c896-rkge"},{"vulnerability":"VCID-raxd-4nxj-gkhp"},{"vulnerability":"VCID-rt5e-saz2-j7c9"},{"vulnerability":"VCID-secz-78pt-dben"},{"vulnerability":"VCID-sutv-qt2x-2yc7"},{"vulnerability":"VCID-swmn-7ns9-ekg1"},{"vulnerability":"VCID-tcxd-z7f3-kkes"},{"vulnerability":"VCID-td39-d3tf-vkhc"},{"vulnerability":"VCID-tn33-re3r-yfhw"},{"vulnerability":"VCID-uj78-2cgz-zbdb"},{"vulnerability":"VCID-vpkr-9akj-hbf6"},{"vulnerability":"VCID-w472-84ep-fkdx"},{"vulnerability":"VCID-w8ff-vxga-8qcz"},{"vulnerability":"VCID-wmam-qmmg-6uay"},{"vulnerability":"VCID-xgj8-zrta-kub9"},{"vulnerability":"VCID-y41p-tgpa-m7cs"},{"vulnerability":"VCID-y44u-23he-aya8"},{"vulnerability":"VCID-yjtj-ydsg-u7ca"},{"vulnerability":"VCID-zg98-v6dj-s7gv"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.54.0"}],"aliases":["CVE-2017-7407"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zqyj-7rr3-fqew"}],"fixing_vulnerabilities":[],"risk_score":"9.6","resource_url":"http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.9.4"}