{"url":"http://public2.vulnerablecode.io/api/packages/413903?format=json","purl":"pkg:composer/craftcms/cms@1.3.2494","type":"composer","namespace":"craftcms","name":"cms","version":"1.3.2494","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"3.7.33","latest_non_vulnerable_version":"5.9.18","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/208536?format=json","vulnerability_id":"VCID-118v-keeb-f7a6","summary":"Craft CMS Cross-site Scripting Vulnerability","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-32470","reference_id":"","reference_type":"","scores":[{"value":"0.00328","scoring_system":"epss","scoring_elements":"0.56172","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-32470"},{"reference_url":"https://github.com/craftcms/cms/blob/3.6.13/CHANGELOG.md#security","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/blob/3.6.13/CHANGELOG.md#security"},{"reference_url":"https://github.com/craftcms/cms/commit/f9378aa154b5f9b64bed3d59cce0c4a8184bf5e6","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/commit/f9378aa154b5f9b64bed3d59cce0c4a8184bf5e6"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32470","reference_id":"CVE-2021-32470","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32470"},{"reference_url":"https://github.com/advisories/GHSA-h2rj-8wgg-mm43","reference_id":"GHSA-h2rj-8wgg-mm43","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-h2rj-8wgg-mm43"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/19779?format=json","purl":"pkg:composer/craftcms/cms@3.6.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-9wmc-pstb-ykfq"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@3.6.13"}],"aliases":["CVE-2021-32470","GHSA-h2rj-8wgg-mm43"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-118v-keeb-f7a6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/296531?format=json","vulnerability_id":"VCID-1um9-4uaq-uuey","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-8385","reference_id":"","reference_type":"","scores":[{"value":"0.00284","scoring_system":"epss","scoring_elements":"0.52149","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-8385"},{"reference_url":"https://craftcms.com/changelog#2-6-2976","reference_id":"","reference_type":"","scores":[],"url":"https://craftcms.com/changelog#2-6-2976"},{"reference_url":"https://github.com/craftcms/cms/blob/2.6.2976/CHANGELOG.md#security","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/blob/2.6.2976/CHANGELOG.md#security"},{"reference_url":"https://github.com/craftcms/cms/commit/38c594badc8efc468b6162ec921d645011a50d35","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/commit/38c594badc8efc468b6162ec921d645011a50d35"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8385","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8385"},{"reference_url":"https://twitter.com/CraftCMS/status/857743080224473088","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://twitter.com/CraftCMS/status/857743080224473088"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/389097?format=json","purl":"pkg:composer/craftcms/cms@2.6.2975","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-118v-keeb-f7a6"},{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-41nc-7j7y-y7fg"},{"vulnerability":"VCID-8qus-7xen-hubb"},{"vulnerability":"VCID-g7s1-n3qt-b3au"},{"vulnerability":"VCID-nfvy-nma3-6qbp"},{"vulnerability":"VCID-njef-qb7s-cub8"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@2.6.2975"},{"url":"http://public2.vulnerablecode.io/api/packages/384874?format=json","purl":"pkg:composer/craftcms/cms@2.6.2976","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-118v-keeb-f7a6"},{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-41nc-7j7y-y7fg"},{"vulnerability":"VCID-8qus-7xen-hubb"},{"vulnerability":"VCID-g7s1-n3qt-b3au"},{"vulnerability":"VCID-nfvy-nma3-6qbp"},{"vulnerability":"VCID-njef-qb7s-cub8"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@2.6.2976"}],"aliases":["CVE-2017-8385","GHSA-j27g-r58q-624w"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1um9-4uaq-uuey"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/209319?format=json","vulnerability_id":"VCID-3asf-kngu-ybf6","summary":"Improper account password reset in Craft CMS","references":[{"reference_url":"http://packetstormsecurity.com/files/166989/Craft-CMS-3.7.36-Password-Reset-Poisoning-Attack.html","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://packetstormsecurity.com/files/166989/Craft-CMS-3.7.36-Password-Reset-Poisoning-Attack.html"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-29933","reference_id":"","reference_type":"","scores":[{"value":"0.02319","scoring_system":"epss","scoring_elements":"0.85141","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-29933"},{"reference_url":"https://github.com/craftcms/cms/blob/develop/CHANGELOG.md","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/craftcms/cms/blob/develop/CHANGELOG.md"},{"reference_url":"https://sec-consult.com/vulnerability-lab","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://sec-consult.com/vulnerability-lab"},{"reference_url":"https://sec-consult.com/vulnerability-lab/advisory/password-reset-poisoning-attack-craft-cms","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://sec-consult.com/vulnerability-lab/advisory/password-reset-poisoning-attack-craft-cms"},{"reference_url":"https://sec-consult.com/vulnerability-lab/advisory/password-reset-poisoning-attack-craft-cms/","reference_id":"","reference_type":"","scores":[],"url":"https://sec-consult.com/vulnerability-lab/advisory/password-reset-poisoning-attack-craft-cms/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29933","reference_id":"CVE-2022-29933","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29933"},{"reference_url":"https://github.com/advisories/GHSA-5cjr-78cq-3wrg","reference_id":"GHSA-5cjr-78cq-3wrg","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-5cjr-78cq-3wrg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/20848?format=json","purl":"pkg:composer/craftcms/cms@3.7.36","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3asf-kngu-ybf6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@3.7.36"},{"url":"http://public2.vulnerablecode.io/api/packages/392449?format=json","purl":"pkg:composer/craftcms/cms@3.7.37","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@3.7.37"}],"aliases":["CVE-2022-29933","GHSA-5cjr-78cq-3wrg"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3asf-kngu-ybf6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/297242?format=json","vulnerability_id":"VCID-41nc-7j7y-y7fg","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-9516","reference_id":"","reference_type":"","scores":[{"value":"0.00791","scoring_system":"epss","scoring_elements":"0.74334","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-9516"},{"reference_url":"https://craftcms.com/changelog#2-6-2982","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://craftcms.com/changelog#2-6-2982"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9516","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9516"},{"reference_url":"https://packetstormsecurity.com/files/142851/Craft-CMS-2.6-Cross-Site-Scripting-File-Upload.html","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://packetstormsecurity.com/files/142851/Craft-CMS-2.6-Cross-Site-Scripting-File-Upload.html"},{"reference_url":"https://twitter.com/CraftCMS/status/872599894912937984","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://twitter.com/CraftCMS/status/872599894912937984"},{"reference_url":"https://www.exploit-db.com/exploits/42143","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.exploit-db.com/exploits/42143"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/42143.txt","reference_id":"CVE-2017-9516","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/42143.txt"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/386527?format=json","purl":"pkg:composer/craftcms/cms@2.6.2982","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-118v-keeb-f7a6"},{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-8qus-7xen-hubb"},{"vulnerability":"VCID-g7s1-n3qt-b3au"},{"vulnerability":"VCID-nfvy-nma3-6qbp"},{"vulnerability":"VCID-njef-qb7s-cub8"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@2.6.2982"}],"aliases":["CVE-2017-9516","GHSA-6pvw-hh48-jx7p"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-41nc-7j7y-y7fg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/296310?format=json","vulnerability_id":"VCID-5b5t-esrd-5ygr","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-8052","reference_id":"","reference_type":"","scores":[{"value":"0.00353","scoring_system":"epss","scoring_elements":"0.58053","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-8052"},{"reference_url":"https://craftcms.com/changelog#2-6-2974","reference_id":"","reference_type":"","scores":[],"url":"https://craftcms.com/changelog#2-6-2974"},{"reference_url":"https://github.com/craftcms/cms/blob/2.6.2974/CHANGELOG.md#security","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/blob/2.6.2974/CHANGELOG.md#security"},{"reference_url":"https://github.com/craftcms/cms/commit/f7e57018ff487d1ebbe375f6cb1852f4d79767ff","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/commit/f7e57018ff487d1ebbe375f6cb1852f4d79767ff"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8052","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8052"},{"reference_url":"https://twitter.com/CraftCMS/status/855535309878112256","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://twitter.com/CraftCMS/status/855535309878112256"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/384550?format=json","purl":"pkg:composer/craftcms/cms@2.6.2974","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-118v-keeb-f7a6"},{"vulnerability":"VCID-1um9-4uaq-uuey"},{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-41nc-7j7y-y7fg"},{"vulnerability":"VCID-8qus-7xen-hubb"},{"vulnerability":"VCID-g7s1-n3qt-b3au"},{"vulnerability":"VCID-nfvy-nma3-6qbp"},{"vulnerability":"VCID-njef-qb7s-cub8"},{"vulnerability":"VCID-pej7-gg8z-dfhc"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-tjbx-u341-ykc4"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@2.6.2974"}],"aliases":["CVE-2017-8052","GHSA-xv5f-2997-qhrq"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5b5t-esrd-5ygr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/332283?format=json","vulnerability_id":"VCID-8qus-7xen-hubb","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-9757","reference_id":"","reference_type":"","scores":[{"value":"0.94276","scoring_system":"epss","scoring_elements":"0.99941","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-9757"},{"reference_url":"https://github.com/giany/CVE/blob/master/CVE-2020-9757.txt","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/giany/CVE/blob/master/CVE-2020-9757.txt"},{"reference_url":"https://github.com/nystudio107/craft-seomatic","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/nystudio107/craft-seomatic"},{"reference_url":"https://github.com/nystudio107/craft-seomatic/blob/v3/CHANGELOG.md","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/nystudio107/craft-seomatic/blob/v3/CHANGELOG.md"},{"reference_url":"https://github.com/nystudio107/craft-seomatic/commit/65ab659cb6c914c7ad671af1e417c0da2431f79b","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/nystudio107/craft-seomatic/commit/65ab659cb6c914c7ad671af1e417c0da2431f79b"},{"reference_url":"https://github.com/nystudio107/craft-seomatic/commit/a1c2cad7e126132d2442ec8ec8e9ab43df02cc0f","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/nystudio107/craft-seomatic/commit/a1c2cad7e126132d2442ec8ec8e9ab43df02cc0f"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9757","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9757"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/455241?format=json","purl":"pkg:composer/craftcms/cms@3.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-118v-keeb-f7a6"},{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-g7s1-n3qt-b3au"},{"vulnerability":"VCID-nfvy-nma3-6qbp"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@3.3.0"}],"aliases":["CVE-2020-9757","GHSA-6q4j-8pjm-5mgc"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8qus-7xen-hubb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/337919?format=json","vulnerability_id":"VCID-g7s1-n3qt-b3au","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-27903","reference_id":"","reference_type":"","scores":[{"value":"0.03824","scoring_system":"epss","scoring_elements":"0.88398","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-27903"},{"reference_url":"https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#367---2021-02-23","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#367---2021-02-23"},{"reference_url":"https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#security","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#security"},{"reference_url":"https://github.com/craftcms/cms/commit/c17728fa0bec11d3b82c34defe0930ed409aec38","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/commit/c17728fa0bec11d3b82c34defe0930ed409aec38"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27903","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27903"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/383150?format=json","purl":"pkg:composer/craftcms/cms@3.6.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-118v-keeb-f7a6"},{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-9wmc-pstb-ykfq"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@3.6.7"}],"aliases":["CVE-2021-27903","GHSA-x2j7-6hxm-87p3"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-g7s1-n3qt-b3au"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/337918?format=json","vulnerability_id":"VCID-nfvy-nma3-6qbp","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-27902","reference_id":"","reference_type":"","scores":[{"value":"0.00419","scoring_system":"epss","scoring_elements":"0.62334","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-27902"},{"reference_url":"https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#360---2021-01-26","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#360---2021-01-26"},{"reference_url":"https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#security-1","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#security-1"},{"reference_url":"https://github.com/craftcms/cms/commit/8ee85a8f03c143fa2420e7d6f311d95cae3b19ce","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/commit/8ee85a8f03c143fa2420e7d6f311d95cae3b19ce"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27902","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27902"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/383183?format=json","purl":"pkg:composer/craftcms/cms@3.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-118v-keeb-f7a6"},{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-9wmc-pstb-ykfq"},{"vulnerability":"VCID-g7s1-n3qt-b3au"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@3.6.0"}],"aliases":["CVE-2021-27902","GHSA-3jxh-789f-p7m6"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nfvy-nma3-6qbp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/304446?format=json","vulnerability_id":"VCID-njef-qb7s-cub8","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-20465","reference_id":"","reference_type":"","scores":[{"value":"0.00664","scoring_system":"epss","scoring_elements":"0.7167","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-20465"},{"reference_url":"https://github.com/craftcms/cms/blob/master/CHANGELOG-v3.md","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/blob/master/CHANGELOG-v3.md"},{"reference_url":"https://github.com/phuctam/Server-Side-Template-Injection-in-CraftCMS-/issues/1","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/phuctam/Server-Side-Template-Injection-in-CraftCMS-/issues/1"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20465","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20465"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/390949?format=json","purl":"pkg:composer/craftcms/cms@3.0.35","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-118v-keeb-f7a6"},{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-8qus-7xen-hubb"},{"vulnerability":"VCID-g7s1-n3qt-b3au"},{"vulnerability":"VCID-nfvy-nma3-6qbp"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@3.0.35"}],"aliases":["CVE-2018-20465","GHSA-j7fx-v37j-v3w7"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-njef-qb7s-cub8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/296530?format=json","vulnerability_id":"VCID-pej7-gg8z-dfhc","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-8384","reference_id":"","reference_type":"","scores":[{"value":"0.00307","scoring_system":"epss","scoring_elements":"0.54318","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-8384"},{"reference_url":"https://craftcms.com/changelog#2-6-2976","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://craftcms.com/changelog#2-6-2976"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8384","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8384"},{"reference_url":"https://twitter.com/CraftCMS/status/857743080224473088","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://twitter.com/CraftCMS/status/857743080224473088"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/389097?format=json","purl":"pkg:composer/craftcms/cms@2.6.2975","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-118v-keeb-f7a6"},{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-41nc-7j7y-y7fg"},{"vulnerability":"VCID-8qus-7xen-hubb"},{"vulnerability":"VCID-g7s1-n3qt-b3au"},{"vulnerability":"VCID-nfvy-nma3-6qbp"},{"vulnerability":"VCID-njef-qb7s-cub8"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@2.6.2975"},{"url":"http://public2.vulnerablecode.io/api/packages/384874?format=json","purl":"pkg:composer/craftcms/cms@2.6.2976","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-118v-keeb-f7a6"},{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-41nc-7j7y-y7fg"},{"vulnerability":"VCID-8qus-7xen-hubb"},{"vulnerability":"VCID-g7s1-n3qt-b3au"},{"vulnerability":"VCID-nfvy-nma3-6qbp"},{"vulnerability":"VCID-njef-qb7s-cub8"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@2.6.2976"}],"aliases":["CVE-2017-8384","GHSA-9mcw-mwxv-grwj"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pej7-gg8z-dfhc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/208693?format=json","vulnerability_id":"VCID-sdtn-nzaq-e3cb","summary":"XSS Injection Vulnerability","references":[{"reference_url":"https://github.com/advisories/GHSA-wf98-vxv9-jqfv","reference_id":"GHSA-wf98-vxv9-jqfv","reference_type":"","scores":[{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-wf98-vxv9-jqfv"},{"reference_url":"https://github.com/craftcms/cms/security/advisories/GHSA-wf98-vxv9-jqfv","reference_id":"GHSA-wf98-vxv9-jqfv","reference_type":"","scores":[{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/security/advisories/GHSA-wf98-vxv9-jqfv"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/20005?format=json","purl":"pkg:composer/craftcms/cms@3.7.29","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3asf-kngu-ybf6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@3.7.29"}],"aliases":["GHSA-wf98-vxv9-jqfv","GMS-2022-790"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sdtn-nzaq-e3cb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/296529?format=json","vulnerability_id":"VCID-tjbx-u341-ykc4","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-8383","reference_id":"","reference_type":"","scores":[{"value":"0.00316","scoring_system":"epss","scoring_elements":"0.55132","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-8383"},{"reference_url":"https://craftcms.com/changelog#2-6-2976","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://craftcms.com/changelog#2-6-2976"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8383","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8383"},{"reference_url":"https://twitter.com/CraftCMS/status/857743080224473088","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://twitter.com/CraftCMS/status/857743080224473088"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/389097?format=json","purl":"pkg:composer/craftcms/cms@2.6.2975","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-118v-keeb-f7a6"},{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-41nc-7j7y-y7fg"},{"vulnerability":"VCID-8qus-7xen-hubb"},{"vulnerability":"VCID-g7s1-n3qt-b3au"},{"vulnerability":"VCID-nfvy-nma3-6qbp"},{"vulnerability":"VCID-njef-qb7s-cub8"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@2.6.2975"},{"url":"http://public2.vulnerablecode.io/api/packages/384874?format=json","purl":"pkg:composer/craftcms/cms@2.6.2976","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-118v-keeb-f7a6"},{"vulnerability":"VCID-3asf-kngu-ybf6"},{"vulnerability":"VCID-41nc-7j7y-y7fg"},{"vulnerability":"VCID-8qus-7xen-hubb"},{"vulnerability":"VCID-g7s1-n3qt-b3au"},{"vulnerability":"VCID-nfvy-nma3-6qbp"},{"vulnerability":"VCID-njef-qb7s-cub8"},{"vulnerability":"VCID-sdtn-nzaq-e3cb"},{"vulnerability":"VCID-x6d2-n97u-8ke1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@2.6.2976"}],"aliases":["CVE-2017-8383","GHSA-7qq6-fgpw-xw45"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tjbx-u341-ykc4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/208683?format=json","vulnerability_id":"VCID-x6d2-n97u-8ke1","summary":"Cross-site Scripting in craftcms/cms","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-28378","reference_id":"","reference_type":"","scores":[{"value":"0.00328","scoring_system":"epss","scoring_elements":"0.56172","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-28378"},{"reference_url":"https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3729---2022-01-18","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3729---2022-01-18"},{"reference_url":"https://github.com/craftcms/cms/commit/7ca2b2d2ccecfb524525afc8ceac6f6e44f84b88","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/craftcms/cms/commit/7ca2b2d2ccecfb524525afc8ceac6f6e44f84b88"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28378","reference_id":"CVE-2022-28378","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28378"},{"reference_url":"https://github.com/advisories/GHSA-7xj5-fwqr-5378","reference_id":"GHSA-7xj5-fwqr-5378","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-7xj5-fwqr-5378"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/20005?format=json","purl":"pkg:composer/craftcms/cms@3.7.29","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3asf-kngu-ybf6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@3.7.29"}],"aliases":["CVE-2022-28378","GHSA-7xj5-fwqr-5378"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-x6d2-n97u-8ke1"}],"fixing_vulnerabilities":[],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@1.3.2494"}