Lookup for vulnerable packages by Package URL.

GET /api/packages/392256?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/392256?format=api",
    "purl": "pkg:apk/alpine/gst-plugins-good@1.10.4-r0?arch=aarch64&distroversion=v3.17&reponame=community",
    "type": "apk",
    "namespace": "alpine",
    "name": "gst-plugins-good",
    "version": "1.10.4-r0",
    "qualifiers": {
        "arch": "aarch64",
        "distroversion": "v3.17",
        "reponame": "community"
    },
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "1.18.4-r0",
    "latest_non_vulnerable_version": "1.18.4-r0",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60089?format=api",
            "vulnerability_id": "VCID-1z2g-dxzn-27d2",
            "summary": "Multiple vulnerabilities have been found in various GStreamer\n    plug-ins, the worst of which could lead to the execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5845.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5845.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5845",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86758",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86861",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86838",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86855",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86769",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86787",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86785",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86805",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86813",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86827",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86823",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86819",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86835",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86839",
                            "published_at": "2026-04-18T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5845"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419582",
                    "reference_id": "1419582",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419582"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201702-3",
                    "reference_id": "ASA-201702-3",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201702-3"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-163",
                    "reference_id": "AVG-163",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Low",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-163"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201705-10",
                    "reference_id": "GLSA-201705-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201705-10"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2060",
                    "reference_id": "RHSA-2017:2060",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2060"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3245-1/",
                    "reference_id": "USN-3245-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3245-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/392256?format=api",
                    "purl": "pkg:apk/alpine/gst-plugins-good@1.10.4-r0?arch=aarch64&distroversion=v3.17&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-good@1.10.4-r0%3Farch=aarch64&distroversion=v3.17&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2017-5845"
            ],
            "risk_score": 2.5,
            "exploitability": "0.5",
            "weighted_severity": "5.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1z2g-dxzn-27d2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60063?format=api",
            "vulnerability_id": "VCID-5vfg-uj1z-zudn",
            "summary": "Multiple vulnerabilities have been found in various GStreamer\n    plug-ins, the worst of which could lead to the execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10199.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10199.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10199",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86792",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86896",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86887",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86894",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86803",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86822",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86815",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86835",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86844",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86857",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86852",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86848",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86865",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8687",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.03126",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86871",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10199"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.3",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419580",
                    "reference_id": "1419580",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419580"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201702-3",
                    "reference_id": "ASA-201702-3",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201702-3"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-163",
                    "reference_id": "AVG-163",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Low",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-163"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201705-10",
                    "reference_id": "GLSA-201705-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201705-10"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2060",
                    "reference_id": "RHSA-2017:2060",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2060"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3245-1/",
                    "reference_id": "USN-3245-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3245-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/392256?format=api",
                    "purl": "pkg:apk/alpine/gst-plugins-good@1.10.4-r0?arch=aarch64&distroversion=v3.17&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-good@1.10.4-r0%3Farch=aarch64&distroversion=v3.17&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2016-10199"
            ],
            "risk_score": 2.5,
            "exploitability": "0.5",
            "weighted_severity": "5.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5vfg-uj1z-zudn"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60062?format=api",
            "vulnerability_id": "VCID-bk2h-q83z-43cn",
            "summary": "Multiple vulnerabilities have been found in various GStreamer\n    plug-ins, the worst of which could lead to the execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10198.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10198.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10198",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73208",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73262",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73311",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73338",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73351",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73218",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73239",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73212",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73248",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73287",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73267",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7326",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00756",
                            "scoring_system": "epss",
                            "scoring_elements": "0.73303",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.01673",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82216",
                            "published_at": "2026-04-29T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10198"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.3",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419558",
                    "reference_id": "1419558",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419558"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201702-3",
                    "reference_id": "ASA-201702-3",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201702-3"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-163",
                    "reference_id": "AVG-163",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Low",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-163"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201705-10",
                    "reference_id": "GLSA-201705-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201705-10"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2060",
                    "reference_id": "RHSA-2017:2060",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2060"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3245-1/",
                    "reference_id": "USN-3245-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3245-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/392256?format=api",
                    "purl": "pkg:apk/alpine/gst-plugins-good@1.10.4-r0?arch=aarch64&distroversion=v3.17&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-good@1.10.4-r0%3Farch=aarch64&distroversion=v3.17&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2016-10198"
            ],
            "risk_score": 2.5,
            "exploitability": "0.5",
            "weighted_severity": "5.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bk2h-q83z-43cn"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60069?format=api",
            "vulnerability_id": "VCID-byg3-424m-w3gs",
            "summary": "Multiple vulnerabilities have been found in various GStreamer\n    plug-ins, the worst of which could lead to the execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9634.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9634.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9634",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94755",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94764",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94768",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94769",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94779",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94783",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94787",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94791",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94792",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94799",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94803",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94806",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94807",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94808",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94809",
                            "published_at": "2026-04-29T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9634"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9634",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9634"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9635",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9635"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9636",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9636"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.8",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:P/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1397441",
                    "reference_id": "1397441",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1397441"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845375",
                    "reference_id": "845375",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845375"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201705-10",
                    "reference_id": "GLSA-201705-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201705-10"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2016:2975",
                    "reference_id": "RHSA-2016:2975",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2016:2975"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:0019",
                    "reference_id": "RHSA-2017:0019",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:0019"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:0020",
                    "reference_id": "RHSA-2017:0020",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:0020"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/392256?format=api",
                    "purl": "pkg:apk/alpine/gst-plugins-good@1.10.4-r0?arch=aarch64&distroversion=v3.17&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-good@1.10.4-r0%3Farch=aarch64&distroversion=v3.17&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2016-9634"
            ],
            "risk_score": 3.4,
            "exploitability": "0.5",
            "weighted_severity": "6.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-byg3-424m-w3gs"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60073?format=api",
            "vulnerability_id": "VCID-cnza-7ar1-f7eh",
            "summary": "Multiple vulnerabilities have been found in various GStreamer\n    plug-ins, the worst of which could lead to the execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9808.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9808.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9808",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90177",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9018",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90192",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90197",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90213",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90218",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90227",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90226",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90221",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90239",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90235",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90249",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90248",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.05492",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90244",
                            "published_at": "2026-04-29T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9808"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9808",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9808"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "8.3",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:P/A:C"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1397441",
                    "reference_id": "1397441",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1397441"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201705-10",
                    "reference_id": "GLSA-201705-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201705-10"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2016:2975",
                    "reference_id": "RHSA-2016:2975",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2016:2975"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:0019",
                    "reference_id": "RHSA-2017:0019",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:0019"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:0020",
                    "reference_id": "RHSA-2017:0020",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:0020"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/392256?format=api",
                    "purl": "pkg:apk/alpine/gst-plugins-good@1.10.4-r0?arch=aarch64&distroversion=v3.17&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-good@1.10.4-r0%3Farch=aarch64&distroversion=v3.17&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2016-9808"
            ],
            "risk_score": 3.4,
            "exploitability": "0.5",
            "weighted_severity": "6.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cnza-7ar1-f7eh"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60084?format=api",
            "vulnerability_id": "VCID-j1w1-4xvp-7bh8",
            "summary": "Multiple vulnerabilities have been found in various GStreamer\n    plug-ins, the worst of which could lead to the execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5840.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5840.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5840",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.06856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91316",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.06856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91399",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.06856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9139",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.06856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91401",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.06856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91321",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.06856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91331",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.06856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91338",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.06856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91351",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.06856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91358",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.06856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91364",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.06856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91367",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.06856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.91392",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5840"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.3",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419588",
                    "reference_id": "1419588",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419588"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201702-3",
                    "reference_id": "ASA-201702-3",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201702-3"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-163",
                    "reference_id": "AVG-163",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Low",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-163"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201705-10",
                    "reference_id": "GLSA-201705-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201705-10"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2060",
                    "reference_id": "RHSA-2017:2060",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2060"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3245-1/",
                    "reference_id": "USN-3245-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3245-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/392256?format=api",
                    "purl": "pkg:apk/alpine/gst-plugins-good@1.10.4-r0?arch=aarch64&distroversion=v3.17&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-good@1.10.4-r0%3Farch=aarch64&distroversion=v3.17&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2017-5840"
            ],
            "risk_score": 2.5,
            "exploitability": "0.5",
            "weighted_severity": "5.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j1w1-4xvp-7bh8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60070?format=api",
            "vulnerability_id": "VCID-k1t8-1fq9-m3gg",
            "summary": "Multiple vulnerabilities have been found in various GStreamer\n    plug-ins, the worst of which could lead to the execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9635.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9635.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9635",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94755",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94764",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94768",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94769",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94779",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94783",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94787",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94791",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94792",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94799",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94803",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94806",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94807",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94808",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.16094",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94809",
                            "published_at": "2026-04-29T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9635"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9634",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9634"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9635",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9635"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9636",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9636"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.8",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:P/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1397441",
                    "reference_id": "1397441",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1397441"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845375",
                    "reference_id": "845375",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845375"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201705-10",
                    "reference_id": "GLSA-201705-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201705-10"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2016:2975",
                    "reference_id": "RHSA-2016:2975",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2016:2975"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:0019",
                    "reference_id": "RHSA-2017:0019",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:0019"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:0020",
                    "reference_id": "RHSA-2017:0020",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:0020"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/392256?format=api",
                    "purl": "pkg:apk/alpine/gst-plugins-good@1.10.4-r0?arch=aarch64&distroversion=v3.17&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-good@1.10.4-r0%3Farch=aarch64&distroversion=v3.17&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2016-9635"
            ],
            "risk_score": 3.4,
            "exploitability": "0.5",
            "weighted_severity": "6.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k1t8-1fq9-m3gg"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60085?format=api",
            "vulnerability_id": "VCID-mcdu-z138-vkgv",
            "summary": "Multiple vulnerabilities have been found in various GStreamer\n    plug-ins, the worst of which could lead to the execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5841.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5841.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5841",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86758",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86861",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86838",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86855",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86769",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86787",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86785",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86805",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86813",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86827",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86823",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86819",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86835",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.03108",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86839",
                            "published_at": "2026-04-18T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5841"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.3",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419589",
                    "reference_id": "1419589",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419589"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201702-3",
                    "reference_id": "ASA-201702-3",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201702-3"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-163",
                    "reference_id": "AVG-163",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Low",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-163"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201705-10",
                    "reference_id": "GLSA-201705-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201705-10"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:2060",
                    "reference_id": "RHSA-2017:2060",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:2060"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3245-1/",
                    "reference_id": "USN-3245-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3245-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/392256?format=api",
                    "purl": "pkg:apk/alpine/gst-plugins-good@1.10.4-r0?arch=aarch64&distroversion=v3.17&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-good@1.10.4-r0%3Farch=aarch64&distroversion=v3.17&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2017-5841"
            ],
            "risk_score": 2.5,
            "exploitability": "0.5",
            "weighted_severity": "5.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mcdu-z138-vkgv"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60071?format=api",
            "vulnerability_id": "VCID-n1tt-vu7b-skew",
            "summary": "Multiple vulnerabilities have been found in various GStreamer\n    plug-ins, the worst of which could lead to the execution of arbitrary code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9636.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9636.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9636",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94893",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94902",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94905",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94907",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94916",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94919",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94924",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94927",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94929",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94937",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9494",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94944",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.1664",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94945",
                            "published_at": "2026-04-24T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9636"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9634",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9634"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9635",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9635"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9636",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9636"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.8",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:P/A:P"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1397441",
                    "reference_id": "1397441",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1397441"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845375",
                    "reference_id": "845375",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845375"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201705-10",
                    "reference_id": "GLSA-201705-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201705-10"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2016:2975",
                    "reference_id": "RHSA-2016:2975",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2016:2975"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:0019",
                    "reference_id": "RHSA-2017:0019",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:0019"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:0020",
                    "reference_id": "RHSA-2017:0020",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:0020"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/392256?format=api",
                    "purl": "pkg:apk/alpine/gst-plugins-good@1.10.4-r0?arch=aarch64&distroversion=v3.17&reponame=community",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-good@1.10.4-r0%3Farch=aarch64&distroversion=v3.17&reponame=community"
                }
            ],
            "aliases": [
                "CVE-2016-9636"
            ],
            "risk_score": 3.4,
            "exploitability": "0.5",
            "weighted_severity": "6.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n1tt-vu7b-skew"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gst-plugins-good@1.10.4-r0%3Farch=aarch64&distroversion=v3.17&reponame=community"
}