{"url":"http://public2.vulnerablecode.io/api/packages/143470?format=json","purl":"pkg:apk/alpine/libexif@0.6.21-r0?arch=x86&distroversion=v3.21&reponame=community","type":"apk","namespace":"alpine","name":"libexif","version":"0.6.21-r0","qualifiers":{"arch":"x86","distroversion":"v3.21","reponame":"community"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"0.6.22-r0","latest_non_vulnerable_version":"0.6.23-r0","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179966?format=json","vulnerability_id":"VCID-2ugg-p2tg-p3ez","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2814.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2814.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2814","reference_id":"","reference_type":"","scores":[{"value":"0.03788","scoring_system":"epss","scoring_elements":"0.88336","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2814"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2814","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2814"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839183","reference_id":"839183","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839183"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/143470?format=json","purl":"pkg:apk/alpine/libexif@0.6.21-r0?arch=x86&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libexif@0.6.21-r0%3Farch=x86&distroversion=v3.21&reponame=community"}],"aliases":["CVE-2012-2814"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2ugg-p2tg-p3ez"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179967?format=json","vulnerability_id":"VCID-8mwj-c8gf-83en","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2836.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2836.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2836","reference_id":"","reference_type":"","scores":[{"value":"0.02522","scoring_system":"epss","scoring_elements":"0.85741","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2836"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2836","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2836"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839184","reference_id":"839184","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839184"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/143470?format=json","purl":"pkg:apk/alpine/libexif@0.6.21-r0?arch=x86&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libexif@0.6.21-r0%3Farch=x86&distroversion=v3.21&reponame=community"}],"aliases":["CVE-2012-2836"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8mwj-c8gf-83en"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179969?format=json","vulnerability_id":"VCID-fkxf-pzuc-4yda","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2840.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2840.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2840","reference_id":"","reference_type":"","scores":[{"value":"0.02397","scoring_system":"epss","scoring_elements":"0.85377","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2840"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2840","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2840"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839188","reference_id":"839188","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839188"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/143470?format=json","purl":"pkg:apk/alpine/libexif@0.6.21-r0?arch=x86&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libexif@0.6.21-r0%3Farch=x86&distroversion=v3.21&reponame=community"}],"aliases":["CVE-2012-2840"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fkxf-pzuc-4yda"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179970?format=json","vulnerability_id":"VCID-uzr9-d4t2-hfc5","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2841.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2841.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2841","reference_id":"","reference_type":"","scores":[{"value":"0.04256","scoring_system":"epss","scoring_elements":"0.89056","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2841"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2841","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2841"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839189","reference_id":"839189","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839189"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/143470?format=json","purl":"pkg:apk/alpine/libexif@0.6.21-r0?arch=x86&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libexif@0.6.21-r0%3Farch=x86&distroversion=v3.21&reponame=community"}],"aliases":["CVE-2012-2841"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-uzr9-d4t2-hfc5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179971?format=json","vulnerability_id":"VCID-vdqk-rcum-f7ff","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2845.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2845.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2845","reference_id":"","reference_type":"","scores":[{"value":"0.00624","scoring_system":"epss","scoring_elements":"0.7065","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2845"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2845","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2845"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681465","reference_id":"681465","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681465"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=840002","reference_id":"840002","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=840002"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/143470?format=json","purl":"pkg:apk/alpine/libexif@0.6.21-r0?arch=x86&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libexif@0.6.21-r0%3Farch=x86&distroversion=v3.21&reponame=community"}],"aliases":["CVE-2012-2845"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vdqk-rcum-f7ff"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libexif@0.6.21-r0%3Farch=x86&distroversion=v3.21&reponame=community"}