{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","type":"apk","namespace":"alpine","name":"mariadb","version":"10.5.16-r0","qualifiers":{"arch":"s390x","distroversion":"v3.13","reponame":"main"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"10.5.17-r0","latest_non_vulnerable_version":"10.5.17-r0","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92667?format=json","vulnerability_id":"VCID-1usv-cx51-y7dn","summary":"An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27378.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27378.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27378","reference_id":"","reference_type":"","scores":[{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44289","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44357","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44366","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44342","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44305","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44317","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27378"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27378","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27378"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074949","reference_id":"2074949","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074949"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27378"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1usv-cx51-y7dn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92672?format=json","vulnerability_id":"VCID-36gx-yv5k-5kgq","summary":"MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27383.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27383.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27383","reference_id":"","reference_type":"","scores":[{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.46996","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.47061","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.47064","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.47046","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.47017","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.47027","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27383"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27383","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27383"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074996","reference_id":"2074996","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074996"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27383"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-36gx-yv5k-5kgq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92686?format=json","vulnerability_id":"VCID-46t6-qfdu-9kbm","summary":"MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27456.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27456.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27456","reference_id":"","reference_type":"","scores":[{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33356","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33457","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33473","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33438","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33405","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33426","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27456"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27456","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27456"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075697","reference_id":"2075697","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075697"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27456"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-46t6-qfdu-9kbm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92671?format=json","vulnerability_id":"VCID-4pd7-2e3f-m7fq","summary":"MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27382.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27382.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27382","reference_id":"","reference_type":"","scores":[{"value":"0.00218","scoring_system":"epss","scoring_elements":"0.44332","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00218","scoring_system":"epss","scoring_elements":"0.444","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00218","scoring_system":"epss","scoring_elements":"0.44409","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00218","scoring_system":"epss","scoring_elements":"0.44385","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00218","scoring_system":"epss","scoring_elements":"0.44349","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00218","scoring_system":"epss","scoring_elements":"0.44362","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27382"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27382","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27382"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074987","reference_id":"2074987","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074987"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27382"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4pd7-2e3f-m7fq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92675?format=json","vulnerability_id":"VCID-8fkt-ntqz-57bd","summary":"MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27386.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27386.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27386","reference_id":"","reference_type":"","scores":[{"value":"0.00209","scoring_system":"epss","scoring_elements":"0.43312","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00209","scoring_system":"epss","scoring_elements":"0.43385","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00209","scoring_system":"epss","scoring_elements":"0.43395","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00209","scoring_system":"epss","scoring_elements":"0.43371","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00209","scoring_system":"epss","scoring_elements":"0.43336","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00209","scoring_system":"epss","scoring_elements":"0.43345","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27386"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27386","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27386"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075005","reference_id":"2075005","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075005"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27386"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8fkt-ntqz-57bd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92673?format=json","vulnerability_id":"VCID-a51u-5b9z-rua1","summary":"An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27384.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27384.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27384","reference_id":"","reference_type":"","scores":[{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44289","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44357","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44366","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44342","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44305","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44317","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27384"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27384","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27384"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074999","reference_id":"2074999","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074999"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27384"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-a51u-5b9z-rua1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92685?format=json","vulnerability_id":"VCID-ap5f-jbtm-17hy","summary":"MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27455.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27455.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27455","reference_id":"","reference_type":"","scores":[{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32441","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32513","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32432","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32481","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.3241","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27455"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27455","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27455"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075701","reference_id":"2075701","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075701"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27455"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ap5f-jbtm-17hy"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/107752?format=json","vulnerability_id":"VCID-c5mz-nddf-2ub6","summary":"mariadb: use-after-poison in Binary_string::free_buffer","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27458.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27458.json"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075700","reference_id":"2075700","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075700"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27458"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-c5mz-nddf-2ub6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92677?format=json","vulnerability_id":"VCID-e5n2-wpj2-dqc9","summary":"MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27444.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27444.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27444","reference_id":"","reference_type":"","scores":[{"value":"0.00142","scoring_system":"epss","scoring_elements":"0.34091","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00142","scoring_system":"epss","scoring_elements":"0.34191","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00142","scoring_system":"epss","scoring_elements":"0.34206","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00142","scoring_system":"epss","scoring_elements":"0.34173","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00142","scoring_system":"epss","scoring_elements":"0.34133","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00142","scoring_system":"epss","scoring_elements":"0.34153","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27444"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27444","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27444"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075696","reference_id":"2075696","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075696"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27444"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-e5n2-wpj2-dqc9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92684?format=json","vulnerability_id":"VCID-e8np-xsq2-4bdb","summary":"MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27452.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27452.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27452","reference_id":"","reference_type":"","scores":[{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33356","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33457","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33473","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33438","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33405","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33426","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27452"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27452","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27452"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076145","reference_id":"2076145","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076145"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27452"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-e8np-xsq2-4bdb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92687?format=json","vulnerability_id":"VCID-e9qm-jf7r-c3bn","summary":"MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27457.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27457.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27457","reference_id":"","reference_type":"","scores":[{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32441","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32513","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32432","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32481","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.3241","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27457"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27457","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27457"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075699","reference_id":"2075699","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075699"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27457"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-e9qm-jf7r-c3bn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92665?format=json","vulnerability_id":"VCID-etr6-22zk-mff2","summary":"MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27376.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27376.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27376","reference_id":"","reference_type":"","scores":[{"value":"0.00323","scoring_system":"epss","scoring_elements":"0.55621","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00323","scoring_system":"epss","scoring_elements":"0.55678","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00323","scoring_system":"epss","scoring_elements":"0.55683","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00323","scoring_system":"epss","scoring_elements":"0.55671","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00323","scoring_system":"epss","scoring_elements":"0.55652","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00323","scoring_system":"epss","scoring_elements":"0.55672","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27376"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27376","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27376"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074817","reference_id":"2074817","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074817"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27376"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-etr6-22zk-mff2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92668?format=json","vulnerability_id":"VCID-ms5a-w74t-h3ad","summary":"An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27379.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27379.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27379","reference_id":"","reference_type":"","scores":[{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44289","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44357","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44366","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44342","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44305","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44317","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27379"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27379","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27379"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074951","reference_id":"2074951","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074951"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27379"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ms5a-w74t-h3ad"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92669?format=json","vulnerability_id":"VCID-pww1-72hb-wfep","summary":"An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27380.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27380.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27380","reference_id":"","reference_type":"","scores":[{"value":"0.00295","scoring_system":"epss","scoring_elements":"0.53076","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00295","scoring_system":"epss","scoring_elements":"0.53137","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00295","scoring_system":"epss","scoring_elements":"0.53145","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00295","scoring_system":"epss","scoring_elements":"0.53125","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00295","scoring_system":"epss","scoring_elements":"0.53099","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00295","scoring_system":"epss","scoring_elements":"0.53124","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27380"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27380","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27380"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074966","reference_id":"2074966","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074966"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27380"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pww1-72hb-wfep"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92680?format=json","vulnerability_id":"VCID-r296-cup4-qfav","summary":"MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27447.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27447.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27447","reference_id":"","reference_type":"","scores":[{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.46996","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.47061","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.47064","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.47046","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.47017","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.47027","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27447"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27447","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27447"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075693","reference_id":"2075693","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075693"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27447"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-r296-cup4-qfav"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92678?format=json","vulnerability_id":"VCID-saen-28jm-byd2","summary":"MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27445.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27445.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27445","reference_id":"","reference_type":"","scores":[{"value":"0.00311","scoring_system":"epss","scoring_elements":"0.5451","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00311","scoring_system":"epss","scoring_elements":"0.54568","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00311","scoring_system":"epss","scoring_elements":"0.54547","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00311","scoring_system":"epss","scoring_elements":"0.54577","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00311","scoring_system":"epss","scoring_elements":"0.54569","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27445"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27445","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27445"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075691","reference_id":"2075691","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075691"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27445"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-saen-28jm-byd2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92682?format=json","vulnerability_id":"VCID-szcn-fb2c-9yex","summary":"MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27449.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27449.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27449","reference_id":"","reference_type":"","scores":[{"value":"0.00244","scoring_system":"epss","scoring_elements":"0.47843","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00244","scoring_system":"epss","scoring_elements":"0.47906","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00244","scoring_system":"epss","scoring_elements":"0.4791","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00244","scoring_system":"epss","scoring_elements":"0.47893","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00244","scoring_system":"epss","scoring_elements":"0.47863","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00244","scoring_system":"epss","scoring_elements":"0.47874","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27449"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27449","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27449"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075695","reference_id":"2075695","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075695"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27449"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-szcn-fb2c-9yex"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92679?format=json","vulnerability_id":"VCID-thg1-mbtb-pkdf","summary":"MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27446.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27446.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27446","reference_id":"","reference_type":"","scores":[{"value":"0.00186","scoring_system":"epss","scoring_elements":"0.4019","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00186","scoring_system":"epss","scoring_elements":"0.40271","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00186","scoring_system":"epss","scoring_elements":"0.40274","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00186","scoring_system":"epss","scoring_elements":"0.40247","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00186","scoring_system":"epss","scoring_elements":"0.40217","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00186","scoring_system":"epss","scoring_elements":"0.40232","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27446"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27446","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27446"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075692","reference_id":"2075692","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075692"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27446"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-thg1-mbtb-pkdf"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92681?format=json","vulnerability_id":"VCID-ttxm-8aq8-cyhk","summary":"There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27448.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27448.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27448","reference_id":"","reference_type":"","scores":[{"value":"0.00172","scoring_system":"epss","scoring_elements":"0.38161","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00172","scoring_system":"epss","scoring_elements":"0.3825","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00172","scoring_system":"epss","scoring_elements":"0.38253","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00172","scoring_system":"epss","scoring_elements":"0.38226","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00172","scoring_system":"epss","scoring_elements":"0.38196","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00172","scoring_system":"epss","scoring_elements":"0.38207","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27448"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27448","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27448"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075694","reference_id":"2075694","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075694"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27448"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ttxm-8aq8-cyhk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92676?format=json","vulnerability_id":"VCID-uypf-cqhp-8bf8","summary":"MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27387.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27387.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27387","reference_id":"","reference_type":"","scores":[{"value":"0.00245","scoring_system":"epss","scoring_elements":"0.47967","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00245","scoring_system":"epss","scoring_elements":"0.4803","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00245","scoring_system":"epss","scoring_elements":"0.48034","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00245","scoring_system":"epss","scoring_elements":"0.48015","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00245","scoring_system":"epss","scoring_elements":"0.47985","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00245","scoring_system":"epss","scoring_elements":"0.47998","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27387"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27387","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27387"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075006","reference_id":"2075006","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075006"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27387"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-uypf-cqhp-8bf8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92683?format=json","vulnerability_id":"VCID-vxdg-14kz-cubg","summary":"MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27451.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27451.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27451","reference_id":"","reference_type":"","scores":[{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32441","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32513","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32432","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32481","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.3241","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27451"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27451","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27451"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076144","reference_id":"2076144","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076144"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27451"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vxdg-14kz-cubg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92670?format=json","vulnerability_id":"VCID-yk4j-a7yp-jua6","summary":"An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27381.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27381.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27381","reference_id":"","reference_type":"","scores":[{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44289","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44357","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44366","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44342","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44305","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00217","scoring_system":"epss","scoring_elements":"0.44317","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27381"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27381","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27381"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074981","reference_id":"2074981","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074981"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27381"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yk4j-a7yp-jua6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92666?format=json","vulnerability_id":"VCID-zvvr-pm35-7bh2","summary":"MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27377.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27377.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27377","reference_id":"","reference_type":"","scores":[{"value":"0.00323","scoring_system":"epss","scoring_elements":"0.55621","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00323","scoring_system":"epss","scoring_elements":"0.55678","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00323","scoring_system":"epss","scoring_elements":"0.55683","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00323","scoring_system":"epss","scoring_elements":"0.55671","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00323","scoring_system":"epss","scoring_elements":"0.55652","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00323","scoring_system":"epss","scoring_elements":"0.55672","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27377"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27377","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27377"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074947","reference_id":"2074947","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074947"},{"reference_url":"https://security.gentoo.org/glsa/202405-25","reference_id":"GLSA-202405-25","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202405-25"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5759","reference_id":"RHSA-2022:5759","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5759"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5826","reference_id":"RHSA-2022:5826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5948","reference_id":"RHSA-2022:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6306","reference_id":"RHSA-2022:6306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6443","reference_id":"RHSA-2022:6443","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6443"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:6821","reference_id":"RHSA-2023:6821","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:6821"},{"reference_url":"https://usn.ubuntu.com/5739-1/","reference_id":"USN-5739-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5739-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/336998?format=json","purl":"pkg:apk/alpine/mariadb@10.5.16-r0?arch=s390x&distroversion=v3.13&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}],"aliases":["CVE-2022-27377"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zvvr-pm35-7bh2"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mariadb@10.5.16-r0%3Farch=s390x&distroversion=v3.13&reponame=main"}