Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/557615?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/557615?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.5.0.Final", "type": "maven", "namespace": "org.wildfly.security", "name": "wildfly-elytron", "version": "1.5.0.Final", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "1.15.15.Final", "latest_non_vulnerable_version": "2.6.2.Final", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42406?format=api", "vulnerability_id": "VCID-6c8v-jje1-7qd4", "summary": "Session Fixation\nA flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10714.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10714.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-10714", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00366", "scoring_system": "epss", "scoring_elements": "0.58894", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00366", "scoring_system": "epss", "scoring_elements": "0.58918", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00366", "scoring_system": "epss", "scoring_elements": "0.5891", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00366", "scoring_system": "epss", "scoring_elements": "0.58912", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00366", "scoring_system": "epss", "scoring_elements": "0.58866", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-10714" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1825714", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1825714" }, { "reference_url": "https://github.com/wildfly-security/wildfly-elytron", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/wildfly-security/wildfly-elytron" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20201223-0002", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20201223-0002" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20201223-0002/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.netapp.com/advisory/ntap-20201223-0002/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10714", "reference_id": "CVE-2020-10714", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10714" }, { "reference_url": "https://github.com/advisories/GHSA-7fhr-2694-rg79", "reference_id": "GHSA-7fhr-2694-rg79", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7fhr-2694-rg79" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3461", "reference_id": "RHSA-2020:3461", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3461" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3462", "reference_id": "RHSA-2020:3462", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3462" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3463", "reference_id": "RHSA-2020:3463", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3463" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3464", "reference_id": "RHSA-2020:3464", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3464" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3501", "reference_id": "RHSA-2020:3501", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3501" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3539", "reference_id": "RHSA-2020:3539", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3539" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3585", "reference_id": "RHSA-2020:3585", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3585" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3637", "reference_id": "RHSA-2020:3637", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3637" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3638", "reference_id": "RHSA-2020:3638", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3638" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3639", "reference_id": "RHSA-2020:3639", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3639" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3642", "reference_id": "RHSA-2020:3642", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3642" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3779", "reference_id": "RHSA-2020:3779", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3779" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:4960", "reference_id": "RHSA-2020:4960", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:4960" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:4961", "reference_id": "RHSA-2020:4961", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:4961" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3140", "reference_id": "RHSA-2021:3140", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3140" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/557677?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.11.4.Final", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mv9x-xp2f-cycv" }, { "vulnerability": "VCID-zfjn-asm3-4kfu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.11.4.Final" }, { "url": "http://public2.vulnerablecode.io/api/packages/60667?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.11.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.11.4" } ], "aliases": [ "CVE-2020-10714", "GHSA-7fhr-2694-rg79" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6c8v-jje1-7qd4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42412?format=api", "vulnerability_id": "VCID-d8h5-ann3-cqab", "summary": "Incorrect Authorization in WildFly Elytron\nA flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1748.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1748.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1748", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0031", "scoring_system": "epss", "scoring_elements": "0.54476", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.0031", "scoring_system": "epss", "scoring_elements": "0.5444", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0031", "scoring_system": "epss", "scoring_elements": "0.54497", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0031", "scoring_system": "epss", "scoring_elements": "0.54507", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0031", "scoring_system": "epss", "scoring_elements": "0.54496", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1748" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1807707", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1807707" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20201001-0005", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20201001-0005" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20201001-0005/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.netapp.com/advisory/ntap-20201001-0005/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1748", "reference_id": "CVE-2020-1748", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1748" }, { "reference_url": "https://github.com/advisories/GHSA-qgrq-cx4c-2rmm", "reference_id": "GHSA-qgrq-cx4c-2rmm", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qgrq-cx4c-2rmm" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3461", "reference_id": "RHSA-2020:3461", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3461" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3462", "reference_id": "RHSA-2020:3462", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3462" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3463", "reference_id": "RHSA-2020:3463", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3463" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3464", "reference_id": "RHSA-2020:3464", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3464" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3501", "reference_id": "RHSA-2020:3501", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3501" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3539", "reference_id": "RHSA-2020:3539", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3539" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3637", "reference_id": "RHSA-2020:3637", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3637" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3638", "reference_id": "RHSA-2020:3638", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3638" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3639", "reference_id": "RHSA-2020:3639", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3639" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3642", "reference_id": "RHSA-2020:3642", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3642" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3779", "reference_id": "RHSA-2020:3779", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3779" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:4960", "reference_id": "RHSA-2020:4960", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:4960" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:4961", "reference_id": "RHSA-2020:4961", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:4961" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/557629?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.6.8.Final", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6c8v-jje1-7qd4" }, { "vulnerability": "VCID-mv9x-xp2f-cycv" }, { "vulnerability": "VCID-zfjn-asm3-4kfu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.6.8.Final" }, { "url": "http://public2.vulnerablecode.io/api/packages/60674?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.6.8", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.6.8" } ], "aliases": [ "CVE-2020-1748", "GHSA-qgrq-cx4c-2rmm" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d8h5-ann3-cqab" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107099?format=api", "vulnerability_id": "VCID-mv9x-xp2f-cycv", "summary": "wildfly-elytron: possible timing attack in ScramServer", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3642.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3642.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3642", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00267", "scoring_system": "epss", "scoring_elements": "0.50388", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00267", "scoring_system": "epss", "scoring_elements": "0.50348", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00267", "scoring_system": "epss", "scoring_elements": "0.50409", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00267", "scoring_system": "epss", "scoring_elements": "0.50417", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00267", "scoring_system": "epss", "scoring_elements": "0.50398", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00267", "scoring_system": "epss", "scoring_elements": "0.50369", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3642" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3642", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3642" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1981407", "reference_id": "1981407", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1981407" }, { "reference_url": "https://github.com/advisories/GHSA-5499-qjvh-6j7w", "reference_id": "GHSA-5499-qjvh-6j7w", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5499-qjvh-6j7w" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3656", "reference_id": "RHSA-2021:3656", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3656" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3658", "reference_id": "RHSA-2021:3658", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3658" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3660", "reference_id": "RHSA-2021:3660", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3660" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3880", "reference_id": "RHSA-2021:3880", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3880" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4767", "reference_id": "RHSA-2021:4767", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4767" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:5149", "reference_id": "RHSA-2021:5149", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:5149" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:5150", "reference_id": "RHSA-2021:5150", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:5150" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:5151", "reference_id": "RHSA-2021:5151", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:5151" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:5154", "reference_id": "RHSA-2021:5154", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:5154" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:5170", "reference_id": "RHSA-2021:5170", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:5170" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:0146", "reference_id": "RHSA-2022:0146", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:0146" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:0520", "reference_id": "RHSA-2022:0520", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:0520" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1179", "reference_id": "RHSA-2022:1179", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1179" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:5532", "reference_id": "RHSA-2022:5532", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:5532" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:5903", "reference_id": "RHSA-2022:5903", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:5903" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/557664?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.10.14.Final", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6c8v-jje1-7qd4" }, { "vulnerability": "VCID-zfjn-asm3-4kfu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.10.14.Final" }, { "url": "http://public2.vulnerablecode.io/api/packages/155181?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.10.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.10.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/580890?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.15.5.Final", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-zfjn-asm3-4kfu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.15.5.Final" }, { "url": "http://public2.vulnerablecode.io/api/packages/155182?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.15.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.15.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/580892?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.16.1.Final", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-zfjn-asm3-4kfu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.16.1.Final" }, { "url": "http://public2.vulnerablecode.io/api/packages/155184?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.16.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.16.1" } ], "aliases": [ "CVE-2021-3642", "GHSA-5499-qjvh-6j7w" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mv9x-xp2f-cycv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/101804?format=api", "vulnerability_id": "VCID-zfjn-asm3-4kfu", "summary": "wildfly-elytron: possible timing attacks via use of unsafe comparator", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-3143.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-3143.json" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2022-3143", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-09T13:46:20Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2022-3143" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3143", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00499", "scoring_system": "epss", "scoring_elements": "0.66314", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00499", "scoring_system": "epss", "scoring_elements": "0.66333", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00499", "scoring_system": "epss", "scoring_elements": "0.66343", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00499", "scoring_system": "epss", "scoring_elements": "0.66335", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00499", "scoring_system": "epss", "scoring_elements": "0.66328", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00499", "scoring_system": "epss", "scoring_elements": "0.66284", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3143" }, { "reference_url": "https://github.com/wildfly-security/wildfly-elytron", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/wildfly-security/wildfly-elytron" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3143", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3143" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2124682", "reference_id": "2124682", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2124682" }, { "reference_url": "https://github.com/advisories/GHSA-jmj6-p2j9-68cp", "reference_id": "GHSA-jmj6-p2j9-68cp", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-jmj6-p2j9-68cp" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:0552", "reference_id": "RHSA-2023:0552", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:0552" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:0553", "reference_id": "RHSA-2023:0553", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:0553" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:0554", "reference_id": "RHSA-2023:0554", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:0554" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:0556", "reference_id": "RHSA-2023:0556", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:0556" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4983", "reference_id": "RHSA-2023:4983", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4983" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/135815?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.15.15.Final", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.15.15.Final" }, { "url": "http://public2.vulnerablecode.io/api/packages/135816?format=api", "purl": "pkg:maven/org.wildfly.security/wildfly-elytron@1.20.3.Final", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8hte-y1x7-4bh8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.20.3.Final" } ], "aliases": [ "CVE-2022-3143", "GHSA-jmj6-p2j9-68cp" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zfjn-asm3-4kfu" } ], "fixing_vulnerabilities": [], "risk_score": "4.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.wildfly.security/wildfly-elytron@1.5.0.Final" }