{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","type":"apk","namespace":"alpine","name":"openjdk11","version":"11.0.14_p9-r0","qualifiers":{"arch":"aarch64","distroversion":"v3.14","reponame":"community"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96421?format=json","vulnerability_id":"VCID-34f4-1cgf-mff6","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21340.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21340.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21340","reference_id":"","reference_type":"","scores":[{"value":"0.05612","scoring_system":"epss","scoring_elements":"0.90485","published_at":"2026-06-04T12:55:00Z"},{"value":"0.05612","scoring_system":"epss","scoring_elements":"0.90513","published_at":"2026-06-09T12:55:00Z"},{"value":"0.05612","scoring_system":"epss","scoring_elements":"0.905","published_at":"2026-06-05T12:55:00Z"},{"value":"0.05612","scoring_system":"epss","scoring_elements":"0.90501","published_at":"2026-06-06T12:55:00Z"},{"value":"0.05612","scoring_system":"epss","scoring_elements":"0.90498","published_at":"2026-06-07T12:55:00Z"},{"value":"0.05612","scoring_system":"epss","scoring_elements":"0.90497","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041884","reference_id":"2041884","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041884"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-28T01:09:22Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-28T01:09:22Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-28T01:09:22Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html","reference_id":"msg00011.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-28T01:09:22Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-28T01:09:22Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0304","reference_id":"RHSA-2022:0304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0305","reference_id":"RHSA-2022:0305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0306","reference_id":"RHSA-2022:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0307","reference_id":"RHSA-2022:0307","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0307"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0312","reference_id":"RHSA-2022:0312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0317","reference_id":"RHSA-2022:0317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0321","reference_id":"RHSA-2022:0321","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0321"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0968","reference_id":"RHSA-2022:0968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0969","reference_id":"RHSA-2022:0969","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0969"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0970","reference_id":"RHSA-2022:0970","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0970"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21340"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-34f4-1cgf-mff6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96424?format=json","vulnerability_id":"VCID-4gfe-39tn-gyha","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21365.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21365.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21365","reference_id":"","reference_type":"","scores":[{"value":"0.00112","scoring_system":"epss","scoring_elements":"0.29221","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00112","scoring_system":"epss","scoring_elements":"0.29241","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00112","scoring_system":"epss","scoring_elements":"0.29208","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30139","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30177","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30213","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041785","reference_id":"2041785","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041785"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-30T20:59:23Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-30T20:59:23Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-30T20:59:23Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html","reference_id":"msg00011.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-30T20:59:23Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-30T20:59:23Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0304","reference_id":"RHSA-2022:0304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0305","reference_id":"RHSA-2022:0305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0306","reference_id":"RHSA-2022:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0307","reference_id":"RHSA-2022:0307","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0307"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0312","reference_id":"RHSA-2022:0312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0317","reference_id":"RHSA-2022:0317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0321","reference_id":"RHSA-2022:0321","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0321"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0968","reference_id":"RHSA-2022:0968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0969","reference_id":"RHSA-2022:0969","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0969"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0970","reference_id":"RHSA-2022:0970","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0970"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21365"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4gfe-39tn-gyha"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96413?format=json","vulnerability_id":"VCID-5nt3-j9sy-hkc1","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21282.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21282.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21282","reference_id":"","reference_type":"","scores":[{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34372","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34427","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.3447","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34486","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.3445","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34407","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041435","reference_id":"2041435","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041435"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:54:44Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:54:44Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:54:44Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html","reference_id":"msg00011.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:54:44Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:54:44Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0304","reference_id":"RHSA-2022:0304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0305","reference_id":"RHSA-2022:0305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0306","reference_id":"RHSA-2022:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0307","reference_id":"RHSA-2022:0307","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0307"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0312","reference_id":"RHSA-2022:0312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0317","reference_id":"RHSA-2022:0317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0321","reference_id":"RHSA-2022:0321","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0321"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21282"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5nt3-j9sy-hkc1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6949?format=json","vulnerability_id":"VCID-754t-89mm-43h2","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35565.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35565.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35565","reference_id":"","reference_type":"","scores":[{"value":"0.00153","scoring_system":"epss","scoring_elements":"0.3574","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00153","scoring_system":"epss","scoring_elements":"0.35724","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00153","scoring_system":"epss","scoring_elements":"0.35697","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00153","scoring_system":"epss","scoring_elements":"0.35803","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00153","scoring_system":"epss","scoring_elements":"0.35793","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00153","scoring_system":"epss","scoring_elements":"0.35763","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35565"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014508","reference_id":"2014508","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014508"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/","reference_id":"6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:11Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/","reference_id":"7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:11Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/"},{"reference_url":"https://security.archlinux.org/AVG-2478","reference_id":"AVG-2478","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2478"},{"reference_url":"https://security.archlinux.org/AVG-2479","reference_id":"AVG-2479","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2479"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/","reference_id":"DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:11Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/"},{"reference_url":"https://www.debian.org/security/2021/dsa-5000","reference_id":"dsa-5000","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:11Z/"}],"url":"https://www.debian.org/security/2021/dsa-5000"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:11Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.gentoo.org/glsa/202409-26","reference_id":"GLSA-202409-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202409-26"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/","reference_id":"GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:11Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/","reference_id":"GXTUWAWXVU37GRNIG4TPMA47THO6VAE6","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:11Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html","reference_id":"msg00008.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:11Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240621-0006/","reference_id":"ntap-20240621-0006","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:11Z/"}],"url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3884","reference_id":"RHSA-2021:3884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3885","reference_id":"RHSA-2021:3885","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3885"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3886","reference_id":"RHSA-2021:3886","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3886"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3887","reference_id":"RHSA-2021:3887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3889","reference_id":"RHSA-2021:3889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3891","reference_id":"RHSA-2021:3891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3892","reference_id":"RHSA-2021:3892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3892"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3893","reference_id":"RHSA-2021:3893","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3893"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3960","reference_id":"RHSA-2021:3960","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3960"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3961","reference_id":"RHSA-2021:3961","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3961"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3967","reference_id":"RHSA-2021:3967","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3967"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3968","reference_id":"RHSA-2021:3968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:5030","reference_id":"RHSA-2021:5030","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:5030"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0310","reference_id":"RHSA-2022:0310","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0310"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0345","reference_id":"RHSA-2022:0345","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0345"},{"reference_url":"https://usn.ubuntu.com/5202-1/","reference_id":"USN-5202-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5202-1/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/","reference_id":"V362B2BWTH5IJDL45QPQGMBKIQOG7JX5","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:11Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2021-35565"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-754t-89mm-43h2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96414?format=json","vulnerability_id":"VCID-766u-6sxf-xyfc","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21283.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21283.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21283","reference_id":"","reference_type":"","scores":[{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32358","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32352","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32429","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32397","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32359","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.3233","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041400","reference_id":"2041400","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041400"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG/","reference_id":"2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:26Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG/"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:26Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:26Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:26Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html","reference_id":"msg00011.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:26Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:26Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0304","reference_id":"RHSA-2022:0304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0305","reference_id":"RHSA-2022:0305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0306","reference_id":"RHSA-2022:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0307","reference_id":"RHSA-2022:0307","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0307"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0312","reference_id":"RHSA-2022:0312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0317","reference_id":"RHSA-2022:0317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0321","reference_id":"RHSA-2022:0321","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0321"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21283"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-766u-6sxf-xyfc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96425?format=json","vulnerability_id":"VCID-8gzb-g6vx-mqbj","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21366.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21366.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21366","reference_id":"","reference_type":"","scores":[{"value":"0.01201","scoring_system":"epss","scoring_elements":"0.79252","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01201","scoring_system":"epss","scoring_elements":"0.79265","published_at":"2026-06-08T12:55:00Z"},{"value":"0.01201","scoring_system":"epss","scoring_elements":"0.79278","published_at":"2026-06-05T12:55:00Z"},{"value":"0.01201","scoring_system":"epss","scoring_elements":"0.79283","published_at":"2026-06-09T12:55:00Z"},{"value":"0.01201","scoring_system":"epss","scoring_elements":"0.79276","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21366"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041789","reference_id":"2041789","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041789"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:04Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:04Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:04Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:04Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21366"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8gzb-g6vx-mqbj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6946?format=json","vulnerability_id":"VCID-9q99-7g57-kkg9","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35586.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35586.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35586","reference_id":"","reference_type":"","scores":[{"value":"0.00167","scoring_system":"epss","scoring_elements":"0.37528","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00167","scoring_system":"epss","scoring_elements":"0.37515","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00167","scoring_system":"epss","scoring_elements":"0.37554","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00167","scoring_system":"epss","scoring_elements":"0.37491","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00167","scoring_system":"epss","scoring_elements":"0.37587","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00167","scoring_system":"epss","scoring_elements":"0.37584","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35586"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015308","reference_id":"2015308","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015308"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/","reference_id":"6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:02Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/"},{"reference_url":"https://security.archlinux.org/AVG-2477","reference_id":"AVG-2477","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2477"},{"reference_url":"https://security.archlinux.org/AVG-2478","reference_id":"AVG-2478","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2478"},{"reference_url":"https://security.archlinux.org/AVG-2479","reference_id":"AVG-2479","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2479"},{"reference_url":"https://www.debian.org/security/2021/dsa-5000","reference_id":"dsa-5000","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:02Z/"}],"url":"https://www.debian.org/security/2021/dsa-5000"},{"reference_url":"https://www.debian.org/security/2021/dsa-5012","reference_id":"dsa-5012","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:02Z/"}],"url":"https://www.debian.org/security/2021/dsa-5012"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:02Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.gentoo.org/glsa/202409-26","reference_id":"GLSA-202409-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202409-26"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/","reference_id":"GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:02Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/","reference_id":"GXTUWAWXVU37GRNIG4TPMA47THO6VAE6","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:02Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html","reference_id":"msg00008.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:02Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240621-0006/","reference_id":"ntap-20240621-0006","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:02Z/"}],"url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3884","reference_id":"RHSA-2021:3884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3885","reference_id":"RHSA-2021:3885","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3885"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3886","reference_id":"RHSA-2021:3886","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3886"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3887","reference_id":"RHSA-2021:3887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3889","reference_id":"RHSA-2021:3889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3891","reference_id":"RHSA-2021:3891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3892","reference_id":"RHSA-2021:3892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3892"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3893","reference_id":"RHSA-2021:3893","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3893"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3960","reference_id":"RHSA-2021:3960","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3960"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3961","reference_id":"RHSA-2021:3961","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3961"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3967","reference_id":"RHSA-2021:3967","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3967"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3968","reference_id":"RHSA-2021:3968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4135","reference_id":"RHSA-2021:4135","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4135"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4531","reference_id":"RHSA-2021:4531","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4531"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4532","reference_id":"RHSA-2021:4532","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4532"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:5030","reference_id":"RHSA-2021:5030","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:5030"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0310","reference_id":"RHSA-2022:0310","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0310"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0345","reference_id":"RHSA-2022:0345","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0345"},{"reference_url":"https://usn.ubuntu.com/5202-1/","reference_id":"USN-5202-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5202-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2021-35586"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9q99-7g57-kkg9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6952?format=json","vulnerability_id":"VCID-ajdd-f5y6-ykbf","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35559.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35559.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35559","reference_id":"","reference_type":"","scores":[{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30136","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30122","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30152","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30144","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30182","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30218","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35559"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014518","reference_id":"2014518","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014518"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/","reference_id":"6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-25T16:02:35Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/","reference_id":"7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-25T16:02:35Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/"},{"reference_url":"https://security.archlinux.org/AVG-2477","reference_id":"AVG-2477","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2477"},{"reference_url":"https://security.archlinux.org/AVG-2478","reference_id":"AVG-2478","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2478"},{"reference_url":"https://security.archlinux.org/AVG-2479","reference_id":"AVG-2479","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2479"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/","reference_id":"DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-25T16:02:35Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/"},{"reference_url":"https://www.debian.org/security/2021/dsa-5000","reference_id":"dsa-5000","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-25T16:02:35Z/"}],"url":"https://www.debian.org/security/2021/dsa-5000"},{"reference_url":"https://www.debian.org/security/2021/dsa-5012","reference_id":"dsa-5012","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-25T16:02:35Z/"}],"url":"https://www.debian.org/security/2021/dsa-5012"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-25T16:02:35Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.gentoo.org/glsa/202409-26","reference_id":"GLSA-202409-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202409-26"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/","reference_id":"GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-25T16:02:35Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/","reference_id":"GXTUWAWXVU37GRNIG4TPMA47THO6VAE6","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-25T16:02:35Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html","reference_id":"msg00008.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-25T16:02:35Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240621-0006/","reference_id":"ntap-20240621-0006","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-25T16:02:35Z/"}],"url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3884","reference_id":"RHSA-2021:3884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3885","reference_id":"RHSA-2021:3885","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3885"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3886","reference_id":"RHSA-2021:3886","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3886"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3887","reference_id":"RHSA-2021:3887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3889","reference_id":"RHSA-2021:3889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3891","reference_id":"RHSA-2021:3891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3892","reference_id":"RHSA-2021:3892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3892"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3893","reference_id":"RHSA-2021:3893","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3893"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3960","reference_id":"RHSA-2021:3960","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3960"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3961","reference_id":"RHSA-2021:3961","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3961"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3967","reference_id":"RHSA-2021:3967","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3967"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3968","reference_id":"RHSA-2021:3968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4135","reference_id":"RHSA-2021:4135","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4135"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4531","reference_id":"RHSA-2021:4531","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4531"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4532","reference_id":"RHSA-2021:4532","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4532"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:5030","reference_id":"RHSA-2021:5030","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:5030"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0310","reference_id":"RHSA-2022:0310","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0310"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0345","reference_id":"RHSA-2022:0345","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0345"},{"reference_url":"https://usn.ubuntu.com/5202-1/","reference_id":"USN-5202-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5202-1/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/","reference_id":"V362B2BWTH5IJDL45QPQGMBKIQOG7JX5","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-25T16:02:35Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2021-35559"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ajdd-f5y6-ykbf"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6948?format=json","vulnerability_id":"VCID-cwky-3rmp-97b4","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35567.json","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35567.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35567","reference_id":"","reference_type":"","scores":[{"value":"0.00162","scoring_system":"epss","scoring_elements":"0.36837","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00162","scoring_system":"epss","scoring_elements":"0.36824","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00162","scoring_system":"epss","scoring_elements":"0.368","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00162","scoring_system":"epss","scoring_elements":"0.36898","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00162","scoring_system":"epss","scoring_elements":"0.36892","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00162","scoring_system":"epss","scoring_elements":"0.36863","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35567"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015658","reference_id":"2015658","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015658"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/","reference_id":"6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:14:55Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/"},{"reference_url":"https://security.archlinux.org/AVG-2477","reference_id":"AVG-2477","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2477"},{"reference_url":"https://security.archlinux.org/AVG-2478","reference_id":"AVG-2478","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2478"},{"reference_url":"https://security.archlinux.org/AVG-2479","reference_id":"AVG-2479","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2479"},{"reference_url":"https://www.debian.org/security/2021/dsa-5000","reference_id":"dsa-5000","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:14:55Z/"}],"url":"https://www.debian.org/security/2021/dsa-5000"},{"reference_url":"https://www.debian.org/security/2021/dsa-5012","reference_id":"dsa-5012","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:14:55Z/"}],"url":"https://www.debian.org/security/2021/dsa-5012"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:14:55Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.gentoo.org/glsa/202409-26","reference_id":"GLSA-202409-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202409-26"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/","reference_id":"GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:14:55Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/","reference_id":"GXTUWAWXVU37GRNIG4TPMA47THO6VAE6","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:14:55Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html","reference_id":"msg00008.html","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:14:55Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3884","reference_id":"RHSA-2021:3884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3885","reference_id":"RHSA-2021:3885","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3885"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3886","reference_id":"RHSA-2021:3886","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3886"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3887","reference_id":"RHSA-2021:3887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3889","reference_id":"RHSA-2021:3889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3891","reference_id":"RHSA-2021:3891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3892","reference_id":"RHSA-2021:3892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3892"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3893","reference_id":"RHSA-2021:3893","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3893"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3960","reference_id":"RHSA-2021:3960","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3960"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3961","reference_id":"RHSA-2021:3961","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3961"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3967","reference_id":"RHSA-2021:3967","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3967"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3968","reference_id":"RHSA-2021:3968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4135","reference_id":"RHSA-2021:4135","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4135"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4531","reference_id":"RHSA-2021:4531","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4531"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4532","reference_id":"RHSA-2021:4532","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4532"},{"reference_url":"https://usn.ubuntu.com/5202-1/","reference_id":"USN-5202-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5202-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2021-35567"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-cwky-3rmp-97b4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96415?format=json","vulnerability_id":"VCID-d7ba-cav8-fyac","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21291.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21291.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21291","reference_id":"","reference_type":"","scores":[{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29189","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29171","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29259","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29226","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29191","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29158","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041831","reference_id":"2041831","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041831"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG/","reference_id":"2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T14:59:32Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG/"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T14:59:32Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T14:59:32Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T14:59:32Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T14:59:32Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21291"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-d7ba-cav8-fyac"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96423?format=json","vulnerability_id":"VCID-db7n-s9z9-xbcr","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21360.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21360.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21360","reference_id":"","reference_type":"","scores":[{"value":"0.00112","scoring_system":"epss","scoring_elements":"0.29221","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00112","scoring_system":"epss","scoring_elements":"0.29241","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00112","scoring_system":"epss","scoring_elements":"0.29208","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30139","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30177","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30213","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041491","reference_id":"2041491","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041491"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T14:48:36Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T14:48:36Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T14:48:36Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html","reference_id":"msg00011.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T14:48:36Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T14:48:36Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0304","reference_id":"RHSA-2022:0304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0305","reference_id":"RHSA-2022:0305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0306","reference_id":"RHSA-2022:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0307","reference_id":"RHSA-2022:0307","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0307"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0312","reference_id":"RHSA-2022:0312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0317","reference_id":"RHSA-2022:0317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0321","reference_id":"RHSA-2022:0321","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0321"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0968","reference_id":"RHSA-2022:0968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0969","reference_id":"RHSA-2022:0969","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0969"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0970","reference_id":"RHSA-2022:0970","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0970"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21360"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-db7n-s9z9-xbcr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6947?format=json","vulnerability_id":"VCID-e6dp-udwu-4bcz","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35578.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35578.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35578","reference_id":"","reference_type":"","scores":[{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34436","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34416","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34392","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34339","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34373","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34453","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35578"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015653","reference_id":"2015653","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015653"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/","reference_id":"6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:53:39Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/"},{"reference_url":"https://security.archlinux.org/AVG-2477","reference_id":"AVG-2477","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2477"},{"reference_url":"https://security.archlinux.org/AVG-2478","reference_id":"AVG-2478","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2478"},{"reference_url":"https://security.archlinux.org/AVG-2479","reference_id":"AVG-2479","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2479"},{"reference_url":"https://www.debian.org/security/2021/dsa-5000","reference_id":"dsa-5000","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:53:39Z/"}],"url":"https://www.debian.org/security/2021/dsa-5000"},{"reference_url":"https://www.debian.org/security/2021/dsa-5012","reference_id":"dsa-5012","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:53:39Z/"}],"url":"https://www.debian.org/security/2021/dsa-5012"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:53:39Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.gentoo.org/glsa/202409-26","reference_id":"GLSA-202409-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202409-26"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/","reference_id":"GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:53:39Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/","reference_id":"GXTUWAWXVU37GRNIG4TPMA47THO6VAE6","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:53:39Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html","reference_id":"msg00008.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:53:39Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240621-0006/","reference_id":"ntap-20240621-0006","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:53:39Z/"}],"url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3884","reference_id":"RHSA-2021:3884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3885","reference_id":"RHSA-2021:3885","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3885"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3886","reference_id":"RHSA-2021:3886","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3886"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3887","reference_id":"RHSA-2021:3887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3889","reference_id":"RHSA-2021:3889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3891","reference_id":"RHSA-2021:3891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3892","reference_id":"RHSA-2021:3892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3892"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3893","reference_id":"RHSA-2021:3893","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3893"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3960","reference_id":"RHSA-2021:3960","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3960"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3961","reference_id":"RHSA-2021:3961","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3961"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3967","reference_id":"RHSA-2021:3967","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3967"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3968","reference_id":"RHSA-2021:3968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4135","reference_id":"RHSA-2021:4135","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4135"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4531","reference_id":"RHSA-2021:4531","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4531"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4532","reference_id":"RHSA-2021:4532","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4532"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:5030","reference_id":"RHSA-2021:5030","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:5030"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0345","reference_id":"RHSA-2022:0345","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0345"},{"reference_url":"https://usn.ubuntu.com/5202-1/","reference_id":"USN-5202-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5202-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2021-35578"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-e6dp-udwu-4bcz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96410?format=json","vulnerability_id":"VCID-f3vv-zzht-cbhy","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21248.json","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21248.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21248","reference_id":"","reference_type":"","scores":[{"value":"0.00083","scoring_system":"epss","scoring_elements":"0.24213","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00083","scoring_system":"epss","scoring_elements":"0.24189","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00083","scoring_system":"epss","scoring_elements":"0.24313","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00083","scoring_system":"epss","scoring_elements":"0.24295","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00083","scoring_system":"epss","scoring_elements":"0.2424","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00083","scoring_system":"epss","scoring_elements":"0.24181","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041801","reference_id":"2041801","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041801"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG/","reference_id":"2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-24T17:45:14Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4J2N4FNXW6JKJBWUZH6SNI2UHCZXQXCY/","reference_id":"4J2N4FNXW6JKJBWUZH6SNI2UHCZXQXCY","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-24T17:45:14Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4J2N4FNXW6JKJBWUZH6SNI2UHCZXQXCY/"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-24T17:45:14Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-24T17:45:14Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-24T17:45:14Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPIWQ6DL5IPOT54UBWTISG5T24FQJ7MN/","reference_id":"KPIWQ6DL5IPOT54UBWTISG5T24FQJ7MN","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-24T17:45:14Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPIWQ6DL5IPOT54UBWTISG5T24FQJ7MN/"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html","reference_id":"msg00011.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-24T17:45:14Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-24T17:45:14Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0304","reference_id":"RHSA-2022:0304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0305","reference_id":"RHSA-2022:0305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0306","reference_id":"RHSA-2022:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0307","reference_id":"RHSA-2022:0307","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0307"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0312","reference_id":"RHSA-2022:0312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0317","reference_id":"RHSA-2022:0317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0321","reference_id":"RHSA-2022:0321","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0321"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0968","reference_id":"RHSA-2022:0968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0969","reference_id":"RHSA-2022:0969","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0969"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0970","reference_id":"RHSA-2022:0970","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0970"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21248"],"risk_score":1.6,"exploitability":"0.5","weighted_severity":"3.3","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-f3vv-zzht-cbhy"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6950?format=json","vulnerability_id":"VCID-fd7c-w5ta-1yc1","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35564.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35564.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35564","reference_id":"","reference_type":"","scores":[{"value":"0.00106","scoring_system":"epss","scoring_elements":"0.28308","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00106","scoring_system":"epss","scoring_elements":"0.28303","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00106","scoring_system":"epss","scoring_elements":"0.28338","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00106","scoring_system":"epss","scoring_elements":"0.28347","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00106","scoring_system":"epss","scoring_elements":"0.28378","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00106","scoring_system":"epss","scoring_elements":"0.2842","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35564"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015061","reference_id":"2015061","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015061"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/","reference_id":"6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-19T18:55:09Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/","reference_id":"7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-19T18:55:09Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/"},{"reference_url":"https://security.archlinux.org/AVG-2477","reference_id":"AVG-2477","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2477"},{"reference_url":"https://security.archlinux.org/AVG-2478","reference_id":"AVG-2478","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2478"},{"reference_url":"https://security.archlinux.org/AVG-2479","reference_id":"AVG-2479","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2479"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/","reference_id":"DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-19T18:55:09Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/"},{"reference_url":"https://www.debian.org/security/2021/dsa-5000","reference_id":"dsa-5000","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-19T18:55:09Z/"}],"url":"https://www.debian.org/security/2021/dsa-5000"},{"reference_url":"https://www.debian.org/security/2021/dsa-5012","reference_id":"dsa-5012","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-19T18:55:09Z/"}],"url":"https://www.debian.org/security/2021/dsa-5012"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-19T18:55:09Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.gentoo.org/glsa/202409-26","reference_id":"GLSA-202409-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202409-26"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/","reference_id":"GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-19T18:55:09Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/","reference_id":"GXTUWAWXVU37GRNIG4TPMA47THO6VAE6","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-19T18:55:09Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html","reference_id":"msg00008.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-19T18:55:09Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240621-0006/","reference_id":"ntap-20240621-0006","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-19T18:55:09Z/"}],"url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3884","reference_id":"RHSA-2021:3884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3885","reference_id":"RHSA-2021:3885","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3885"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3886","reference_id":"RHSA-2021:3886","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3886"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3887","reference_id":"RHSA-2021:3887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3889","reference_id":"RHSA-2021:3889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3891","reference_id":"RHSA-2021:3891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3892","reference_id":"RHSA-2021:3892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3892"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3893","reference_id":"RHSA-2021:3893","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3893"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3960","reference_id":"RHSA-2021:3960","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3960"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3961","reference_id":"RHSA-2021:3961","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3961"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3967","reference_id":"RHSA-2021:3967","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3967"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3968","reference_id":"RHSA-2021:3968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4135","reference_id":"RHSA-2021:4135","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4135"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4531","reference_id":"RHSA-2021:4531","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4531"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4532","reference_id":"RHSA-2021:4532","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4532"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:5030","reference_id":"RHSA-2021:5030","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:5030"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0310","reference_id":"RHSA-2022:0310","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0310"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0345","reference_id":"RHSA-2022:0345","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0345"},{"reference_url":"https://usn.ubuntu.com/5202-1/","reference_id":"USN-5202-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5202-1/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/","reference_id":"V362B2BWTH5IJDL45QPQGMBKIQOG7JX5","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-19T18:55:09Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2021-35564"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fd7c-w5ta-1yc1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6944?format=json","vulnerability_id":"VCID-fk6t-6cx2-ckh7","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35603.json","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35603.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35603","reference_id":"","reference_type":"","scores":[{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.33258","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.33237","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.3327","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.33188","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.33305","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.3329","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35603"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015311","reference_id":"2015311","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015311"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/","reference_id":"6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:52:57Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/"},{"reference_url":"https://security.archlinux.org/AVG-2477","reference_id":"AVG-2477","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2477"},{"reference_url":"https://security.archlinux.org/AVG-2478","reference_id":"AVG-2478","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2478"},{"reference_url":"https://security.archlinux.org/AVG-2479","reference_id":"AVG-2479","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2479"},{"reference_url":"https://www.debian.org/security/2021/dsa-5000","reference_id":"dsa-5000","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:52:57Z/"}],"url":"https://www.debian.org/security/2021/dsa-5000"},{"reference_url":"https://www.debian.org/security/2021/dsa-5012","reference_id":"dsa-5012","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:52:57Z/"}],"url":"https://www.debian.org/security/2021/dsa-5012"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:52:57Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.gentoo.org/glsa/202409-26","reference_id":"GLSA-202409-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202409-26"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/","reference_id":"GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:52:57Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/","reference_id":"GXTUWAWXVU37GRNIG4TPMA47THO6VAE6","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:52:57Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html","reference_id":"msg00008.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:52:57Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240621-0006/","reference_id":"ntap-20240621-0006","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-18T17:52:57Z/"}],"url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3884","reference_id":"RHSA-2021:3884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3885","reference_id":"RHSA-2021:3885","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3885"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3886","reference_id":"RHSA-2021:3886","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3886"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3887","reference_id":"RHSA-2021:3887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3889","reference_id":"RHSA-2021:3889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3891","reference_id":"RHSA-2021:3891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3892","reference_id":"RHSA-2021:3892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3892"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3893","reference_id":"RHSA-2021:3893","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3893"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3960","reference_id":"RHSA-2021:3960","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3960"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3961","reference_id":"RHSA-2021:3961","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3961"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3967","reference_id":"RHSA-2021:3967","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3967"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3968","reference_id":"RHSA-2021:3968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4135","reference_id":"RHSA-2021:4135","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4135"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4531","reference_id":"RHSA-2021:4531","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4531"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4532","reference_id":"RHSA-2021:4532","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4532"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0968","reference_id":"RHSA-2022:0968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0969","reference_id":"RHSA-2022:0969","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0969"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0970","reference_id":"RHSA-2022:0970","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0970"},{"reference_url":"https://usn.ubuntu.com/5202-1/","reference_id":"USN-5202-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5202-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2021-35603"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fk6t-6cx2-ckh7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6953?format=json","vulnerability_id":"VCID-fubs-k5u5-1yf8","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35556.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35556.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35556","reference_id":"","reference_type":"","scores":[{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33318","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33298","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33332","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.3325","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33368","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00137","scoring_system":"epss","scoring_elements":"0.33352","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35556"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014515","reference_id":"2014515","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014515"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/","reference_id":"6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:32:53Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/","reference_id":"7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:32:53Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/"},{"reference_url":"https://security.archlinux.org/AVG-2477","reference_id":"AVG-2477","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2477"},{"reference_url":"https://security.archlinux.org/AVG-2478","reference_id":"AVG-2478","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2478"},{"reference_url":"https://security.archlinux.org/AVG-2479","reference_id":"AVG-2479","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2479"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/","reference_id":"DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:32:53Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/"},{"reference_url":"https://www.debian.org/security/2021/dsa-5000","reference_id":"dsa-5000","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:32:53Z/"}],"url":"https://www.debian.org/security/2021/dsa-5000"},{"reference_url":"https://www.debian.org/security/2021/dsa-5012","reference_id":"dsa-5012","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:32:53Z/"}],"url":"https://www.debian.org/security/2021/dsa-5012"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:32:53Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.gentoo.org/glsa/202409-26","reference_id":"GLSA-202409-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202409-26"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/","reference_id":"GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:32:53Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/","reference_id":"GXTUWAWXVU37GRNIG4TPMA47THO6VAE6","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:32:53Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html","reference_id":"msg00008.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:32:53Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240621-0006/","reference_id":"ntap-20240621-0006","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:32:53Z/"}],"url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3884","reference_id":"RHSA-2021:3884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3885","reference_id":"RHSA-2021:3885","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3885"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3886","reference_id":"RHSA-2021:3886","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3886"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3887","reference_id":"RHSA-2021:3887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3889","reference_id":"RHSA-2021:3889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3891","reference_id":"RHSA-2021:3891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3892","reference_id":"RHSA-2021:3892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3892"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3893","reference_id":"RHSA-2021:3893","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3893"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3960","reference_id":"RHSA-2021:3960","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3960"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3961","reference_id":"RHSA-2021:3961","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3961"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3967","reference_id":"RHSA-2021:3967","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3967"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3968","reference_id":"RHSA-2021:3968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4135","reference_id":"RHSA-2021:4135","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4135"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4531","reference_id":"RHSA-2021:4531","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4531"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4532","reference_id":"RHSA-2021:4532","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4532"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:5030","reference_id":"RHSA-2021:5030","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:5030"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0310","reference_id":"RHSA-2022:0310","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0310"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0345","reference_id":"RHSA-2022:0345","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0345"},{"reference_url":"https://usn.ubuntu.com/5202-1/","reference_id":"USN-5202-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5202-1/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/","reference_id":"V362B2BWTH5IJDL45QPQGMBKIQOG7JX5","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:32:53Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2021-35556"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fubs-k5u5-1yf8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96417?format=json","vulnerability_id":"VCID-kfvv-nw6p-qfbe","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21294.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21294.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21294","reference_id":"","reference_type":"","scores":[{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30131","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30146","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30116","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00132","scoring_system":"epss","scoring_elements":"0.32229","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00132","scoring_system":"epss","scoring_elements":"0.3227","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00132","scoring_system":"epss","scoring_elements":"0.32301","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041427","reference_id":"2041427","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041427"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:12:30Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:12:30Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:12:30Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html","reference_id":"msg00011.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:12:30Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:12:30Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0304","reference_id":"RHSA-2022:0304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0305","reference_id":"RHSA-2022:0305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0306","reference_id":"RHSA-2022:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0307","reference_id":"RHSA-2022:0307","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0307"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0312","reference_id":"RHSA-2022:0312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0317","reference_id":"RHSA-2022:0317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0321","reference_id":"RHSA-2022:0321","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0321"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0968","reference_id":"RHSA-2022:0968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0969","reference_id":"RHSA-2022:0969","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0969"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0970","reference_id":"RHSA-2022:0970","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0970"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21294"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-kfvv-nw6p-qfbe"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96418?format=json","vulnerability_id":"VCID-n1vg-1mwa-yqhz","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21296.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21296.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21296","reference_id":"","reference_type":"","scores":[{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32427","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32419","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32499","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32467","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32428","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32397","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041439","reference_id":"2041439","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041439"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:54:36Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:54:36Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:54:36Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html","reference_id":"msg00011.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:54:36Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:54:36Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0304","reference_id":"RHSA-2022:0304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0305","reference_id":"RHSA-2022:0305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0306","reference_id":"RHSA-2022:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0307","reference_id":"RHSA-2022:0307","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0307"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0312","reference_id":"RHSA-2022:0312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0317","reference_id":"RHSA-2022:0317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0321","reference_id":"RHSA-2022:0321","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0321"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21296"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-n1vg-1mwa-yqhz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96411?format=json","vulnerability_id":"VCID-pryq-xq8m-wbbq","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21271","reference_id":"","reference_type":"","scores":[{"value":"0.01653","scoring_system":"epss","scoring_elements":"0.82391","published_at":"2026-06-06T12:55:00Z"},{"value":"0.01653","scoring_system":"epss","scoring_elements":"0.82363","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01653","scoring_system":"epss","scoring_elements":"0.82393","published_at":"2026-06-05T12:55:00Z"},{"value":"0.02229","scoring_system":"epss","scoring_elements":"0.84842","published_at":"2026-06-08T12:55:00Z"},{"value":"0.02229","scoring_system":"epss","scoring_elements":"0.84856","published_at":"2026-06-09T12:55:00Z"},{"value":"0.02229","scoring_system":"epss","scoring_elements":"0.84853","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21271"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-24T17:35:28Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-24T17:35:28Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21271"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pryq-xq8m-wbbq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96412?format=json","vulnerability_id":"VCID-q7s3-rw8k-qkgd","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21277.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21277.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21277","reference_id":"","reference_type":"","scores":[{"value":"0.01201","scoring_system":"epss","scoring_elements":"0.79252","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01201","scoring_system":"epss","scoring_elements":"0.79265","published_at":"2026-06-08T12:55:00Z"},{"value":"0.01201","scoring_system":"epss","scoring_elements":"0.79278","published_at":"2026-06-05T12:55:00Z"},{"value":"0.01201","scoring_system":"epss","scoring_elements":"0.79283","published_at":"2026-06-09T12:55:00Z"},{"value":"0.01201","scoring_system":"epss","scoring_elements":"0.79276","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041479","reference_id":"2041479","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041479"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:31Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:31Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:31Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:31Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21277"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-q7s3-rw8k-qkgd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6954?format=json","vulnerability_id":"VCID-qbaf-vf9e-b3gz","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35550.json","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35550.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35550","reference_id":"","reference_type":"","scores":[{"value":"0.00091","scoring_system":"epss","scoring_elements":"0.25662","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00091","scoring_system":"epss","scoring_elements":"0.25657","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00091","scoring_system":"epss","scoring_elements":"0.2567","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00091","scoring_system":"epss","scoring_elements":"0.25763","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00091","scoring_system":"epss","scoring_elements":"0.25773","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00091","scoring_system":"epss","scoring_elements":"0.25716","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35550"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015648","reference_id":"2015648","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015648"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/","reference_id":"6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:29:28Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/","reference_id":"7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:29:28Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/"},{"reference_url":"https://security.archlinux.org/AVG-2478","reference_id":"AVG-2478","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2478"},{"reference_url":"https://security.archlinux.org/AVG-2479","reference_id":"AVG-2479","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2479"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/","reference_id":"DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:29:28Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/"},{"reference_url":"https://www.debian.org/security/2021/dsa-5000","reference_id":"dsa-5000","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:29:28Z/"}],"url":"https://www.debian.org/security/2021/dsa-5000"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:29:28Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.gentoo.org/glsa/202409-26","reference_id":"GLSA-202409-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202409-26"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/","reference_id":"GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:29:28Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/","reference_id":"GXTUWAWXVU37GRNIG4TPMA47THO6VAE6","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:29:28Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html","reference_id":"msg00008.html","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:29:28Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240621-0006/","reference_id":"ntap-20240621-0006","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:29:28Z/"}],"url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3884","reference_id":"RHSA-2021:3884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3885","reference_id":"RHSA-2021:3885","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3885"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3886","reference_id":"RHSA-2021:3886","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3886"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3887","reference_id":"RHSA-2021:3887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3889","reference_id":"RHSA-2021:3889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3891","reference_id":"RHSA-2021:3891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3892","reference_id":"RHSA-2021:3892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3892"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3893","reference_id":"RHSA-2021:3893","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3893"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3960","reference_id":"RHSA-2021:3960","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3960"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3961","reference_id":"RHSA-2021:3961","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3961"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3967","reference_id":"RHSA-2021:3967","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3967"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3968","reference_id":"RHSA-2021:3968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0968","reference_id":"RHSA-2022:0968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0969","reference_id":"RHSA-2022:0969","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0969"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0970","reference_id":"RHSA-2022:0970","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0970"},{"reference_url":"https://usn.ubuntu.com/5202-1/","reference_id":"USN-5202-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5202-1/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/","reference_id":"V362B2BWTH5IJDL45QPQGMBKIQOG7JX5","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T14:29:28Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2021-35550"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qbaf-vf9e-b3gz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6951?format=json","vulnerability_id":"VCID-qrbh-r1s1-uqhm","summary":"multiple issues","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35561.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35561.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35561","reference_id":"","reference_type":"","scores":[{"value":"0.00176","scoring_system":"epss","scoring_elements":"0.3888","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00176","scoring_system":"epss","scoring_elements":"0.3887","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00176","scoring_system":"epss","scoring_elements":"0.38897","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00176","scoring_system":"epss","scoring_elements":"0.38833","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00176","scoring_system":"epss","scoring_elements":"0.38925","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00176","scoring_system":"epss","scoring_elements":"0.38921","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-35561"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35550"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35556"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35559"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35561"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35564"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35565"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35567"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35578"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35586"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35603"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014524","reference_id":"2014524","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014524"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/","reference_id":"6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:13Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/","reference_id":"7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:13Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/"},{"reference_url":"https://security.archlinux.org/AVG-2477","reference_id":"AVG-2477","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2477"},{"reference_url":"https://security.archlinux.org/AVG-2478","reference_id":"AVG-2478","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2478"},{"reference_url":"https://security.archlinux.org/AVG-2479","reference_id":"AVG-2479","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2479"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/","reference_id":"DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:13Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/"},{"reference_url":"https://www.debian.org/security/2021/dsa-5000","reference_id":"dsa-5000","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:13Z/"}],"url":"https://www.debian.org/security/2021/dsa-5000"},{"reference_url":"https://www.debian.org/security/2021/dsa-5012","reference_id":"dsa-5012","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:13Z/"}],"url":"https://www.debian.org/security/2021/dsa-5012"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:13Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://security.gentoo.org/glsa/202409-26","reference_id":"GLSA-202409-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202409-26"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/","reference_id":"GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:13Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/","reference_id":"GXTUWAWXVU37GRNIG4TPMA47THO6VAE6","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:13Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html","reference_id":"msg00008.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:13Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3884","reference_id":"RHSA-2021:3884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3885","reference_id":"RHSA-2021:3885","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3885"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3886","reference_id":"RHSA-2021:3886","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3886"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3887","reference_id":"RHSA-2021:3887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3889","reference_id":"RHSA-2021:3889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3891","reference_id":"RHSA-2021:3891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3892","reference_id":"RHSA-2021:3892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3892"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3893","reference_id":"RHSA-2021:3893","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3893"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3960","reference_id":"RHSA-2021:3960","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3960"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3961","reference_id":"RHSA-2021:3961","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3961"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3967","reference_id":"RHSA-2021:3967","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3967"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3968","reference_id":"RHSA-2021:3968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:3968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4135","reference_id":"RHSA-2021:4135","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4135"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4531","reference_id":"RHSA-2021:4531","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4531"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4532","reference_id":"RHSA-2021:4532","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4532"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4957","reference_id":"RHSA-2022:4957","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4957"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4959","reference_id":"RHSA-2022:4959","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4959"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:5837","reference_id":"RHSA-2022:5837","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:5837"},{"reference_url":"https://usn.ubuntu.com/5202-1/","reference_id":"USN-5202-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5202-1/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/","reference_id":"V362B2BWTH5IJDL45QPQGMBKIQOG7JX5","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-25T19:32:13Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2021-35561"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qrbh-r1s1-uqhm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96419?format=json","vulnerability_id":"VCID-ref9-5wc1-5fcy","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21299.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21299.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21299","reference_id":"","reference_type":"","scores":[{"value":"0.00097","scoring_system":"epss","scoring_elements":"0.26688","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00097","scoring_system":"epss","scoring_elements":"0.26698","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00097","scoring_system":"epss","scoring_elements":"0.26792","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00097","scoring_system":"epss","scoring_elements":"0.26783","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00097","scoring_system":"epss","scoring_elements":"0.26743","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00097","scoring_system":"epss","scoring_elements":"0.26689","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041472","reference_id":"2041472","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041472"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:13:18Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:13:18Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:13:18Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html","reference_id":"msg00011.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:13:18Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:13:18Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240621-0006/","reference_id":"ntap-20240621-0006","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:13:18Z/"}],"url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0304","reference_id":"RHSA-2022:0304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0305","reference_id":"RHSA-2022:0305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0306","reference_id":"RHSA-2022:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0307","reference_id":"RHSA-2022:0307","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0307"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0312","reference_id":"RHSA-2022:0312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0317","reference_id":"RHSA-2022:0317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0321","reference_id":"RHSA-2022:0321","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0321"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4918","reference_id":"RHSA-2022:4918","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4918"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4919","reference_id":"RHSA-2022:4919","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4919"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4922","reference_id":"RHSA-2022:4922","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4922"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4957","reference_id":"RHSA-2022:4957","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4957"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21299"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ref9-5wc1-5fcy"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96422?format=json","vulnerability_id":"VCID-wjrk-ff88-gufv","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21341.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21341.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21341","reference_id":"","reference_type":"","scores":[{"value":"0.00143","scoring_system":"epss","scoring_elements":"0.3431","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00143","scoring_system":"epss","scoring_elements":"0.34363","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00143","scoring_system":"epss","scoring_elements":"0.34407","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00143","scoring_system":"epss","scoring_elements":"0.34423","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00143","scoring_system":"epss","scoring_elements":"0.34387","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00143","scoring_system":"epss","scoring_elements":"0.34345","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041897","reference_id":"2041897","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041897"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:02:07Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:02:07Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:02:07Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html","reference_id":"msg00011.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:02:07Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T15:02:07Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0304","reference_id":"RHSA-2022:0304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0305","reference_id":"RHSA-2022:0305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0306","reference_id":"RHSA-2022:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0307","reference_id":"RHSA-2022:0307","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0307"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0312","reference_id":"RHSA-2022:0312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0317","reference_id":"RHSA-2022:0317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0321","reference_id":"RHSA-2022:0321","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0321"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0968","reference_id":"RHSA-2022:0968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0969","reference_id":"RHSA-2022:0969","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0969"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0970","reference_id":"RHSA-2022:0970","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0970"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21341"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wjrk-ff88-gufv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96416?format=json","vulnerability_id":"VCID-x6q8-wzbk-ekh5","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21293.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21293.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21293","reference_id":"","reference_type":"","scores":[{"value":"0.00096","scoring_system":"epss","scoring_elements":"0.26465","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00096","scoring_system":"epss","scoring_elements":"0.26464","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00096","scoring_system":"epss","scoring_elements":"0.26567","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00096","scoring_system":"epss","scoring_elements":"0.26558","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00096","scoring_system":"epss","scoring_elements":"0.26516","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00096","scoring_system":"epss","scoring_elements":"0.2646","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041417","reference_id":"2041417","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041417"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG/","reference_id":"2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-26T20:44:41Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG/"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-26T20:44:41Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-26T20:44:41Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-26T20:44:41Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html","reference_id":"msg00011.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-26T20:44:41Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-26T20:44:41Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0304","reference_id":"RHSA-2022:0304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0305","reference_id":"RHSA-2022:0305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0306","reference_id":"RHSA-2022:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0307","reference_id":"RHSA-2022:0307","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0307"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0312","reference_id":"RHSA-2022:0312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0317","reference_id":"RHSA-2022:0317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0321","reference_id":"RHSA-2022:0321","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0321"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0968","reference_id":"RHSA-2022:0968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0969","reference_id":"RHSA-2022:0969","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0969"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0970","reference_id":"RHSA-2022:0970","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0970"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21293"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-x6q8-wzbk-ekh5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96420?format=json","vulnerability_id":"VCID-xu8s-gw2e-xyaf","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21305.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21305.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21305","reference_id":"","reference_type":"","scores":[{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.3852","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.38538","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.3851","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00182","scoring_system":"epss","scoring_elements":"0.39777","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00182","scoring_system":"epss","scoring_elements":"0.39692","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00182","scoring_system":"epss","scoring_elements":"0.3978","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21248"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21277"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21282"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21283"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21291"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21293"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21294"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21296"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21305"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21341"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21360"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21366"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041878","reference_id":"2041878","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041878"},{"reference_url":"https://www.debian.org/security/2022/dsa-5057","reference_id":"dsa-5057","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:21Z/"}],"url":"https://www.debian.org/security/2022/dsa-5057"},{"reference_url":"https://www.debian.org/security/2022/dsa-5058","reference_id":"dsa-5058","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:21Z/"}],"url":"https://www.debian.org/security/2022/dsa-5058"},{"reference_url":"https://security.gentoo.org/glsa/202209-05","reference_id":"GLSA-202209-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:21Z/"}],"url":"https://security.gentoo.org/glsa/202209-05"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html","reference_id":"msg00011.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:21Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220121-0007/","reference_id":"ntap-20220121-0007","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-15T14:45:21Z/"}],"url":"https://security.netapp.com/advisory/ntap-20220121-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0161","reference_id":"RHSA-2022:0161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0165","reference_id":"RHSA-2022:0165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0166","reference_id":"RHSA-2022:0166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0185","reference_id":"RHSA-2022:0185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0204","reference_id":"RHSA-2022:0204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0209","reference_id":"RHSA-2022:0209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0211","reference_id":"RHSA-2022:0211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0228","reference_id":"RHSA-2022:0228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0229","reference_id":"RHSA-2022:0229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0233","reference_id":"RHSA-2022:0233","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0233"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0304","reference_id":"RHSA-2022:0304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0305","reference_id":"RHSA-2022:0305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0306","reference_id":"RHSA-2022:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0307","reference_id":"RHSA-2022:0307","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0307"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0312","reference_id":"RHSA-2022:0312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0317","reference_id":"RHSA-2022:0317","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0317"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:0321","reference_id":"RHSA-2022:0321","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:0321"},{"reference_url":"https://usn.ubuntu.com/5313-1/","reference_id":"USN-5313-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5313-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/348207?format=json","purl":"pkg:apk/alpine/openjdk11@11.0.14_p9-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2022-21305"],"risk_score":2.4,"exploitability":"0.5","weighted_severity":"4.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-xu8s-gw2e-xyaf"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk11@11.0.14_p9-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}