Lookup for vulnerable packages by Package URL.

GET /api/packages/928990?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/928990?format=api",
    "purl": "pkg:deb/debian/libvncserver@0.9.11%2Bdfsg-1.2?distro=trixie",
    "type": "deb",
    "namespace": "debian",
    "name": "libvncserver",
    "version": "0.9.11+dfsg-1.2",
    "qualifiers": {
        "distro": "trixie"
    },
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "0.9.11+dfsg-1.3",
    "latest_non_vulnerable_version": "0.9.15+dfsg-4",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/30944?format=api",
            "vulnerability_id": "VCID-3817-suhy-xfhd",
            "summary": "Multiple vulnerabilities have been found in ssvnc, the worst of\n    which could result in the arbitrary execution of code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20020.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "8.8",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20020.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-20020",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95607",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95616",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95621",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95624",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95632",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95636",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95641",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9564",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95643",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95651",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95655",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95656",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95657",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95659",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95673",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95676",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95682",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95689",
                            "published_at": "2026-05-11T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95693",
                            "published_at": "2026-05-12T12:55:00Z"
                        },
                        {
                            "value": "0.2103",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95706",
                            "published_at": "2026-05-14T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-20020"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "8.8",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661117",
                    "reference_id": "1661117",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661117"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941",
                    "reference_id": "916941",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945827",
                    "reference_id": "945827",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945827"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201908-05",
                    "reference_id": "GLSA-201908-05",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201908-05"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202006-06",
                    "reference_id": "GLSA-202006-06",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202006-06"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3877-1/",
                    "reference_id": "USN-3877-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3877-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4547-1/",
                    "reference_id": "USN-4547-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4547-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4547-2/",
                    "reference_id": "USN-4547-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4547-2/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4587-1/",
                    "reference_id": "USN-4587-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4587-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928990?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.11%2Bdfsg-1.2?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.11%252Bdfsg-1.2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928983?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.13%2Bdfsg-2%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.13%252Bdfsg-2%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928981?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.14%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.14%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928985?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928984?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-2?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1000450?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1072636?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-4?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-4%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2018-20020"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "7.9",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3817-suhy-xfhd"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38630?format=api",
            "vulnerability_id": "VCID-9nha-t527-rfhs",
            "summary": "Multiple vulnerabilities have been found in LibVNCServer, the worst\n    of which could result in the arbitrary execution of code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20023.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.3",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20023.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-20023",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74918",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74921",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7495",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74924",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74957",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74969",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74992",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74971",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74961",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74998",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75005",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74995",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75033",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75038",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75041",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75048",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75074",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75098",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75079",
                            "published_at": "2026-05-11T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75087",
                            "published_at": "2026-05-12T12:55:00Z"
                        },
                        {
                            "value": "0.00856",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75141",
                            "published_at": "2026-05-14T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-20023"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.3",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661128",
                    "reference_id": "1661128",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661128"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941",
                    "reference_id": "916941",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201908-05",
                    "reference_id": "GLSA-201908-05",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201908-05"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3877-1/",
                    "reference_id": "USN-3877-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3877-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4547-1/",
                    "reference_id": "USN-4547-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4547-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4587-1/",
                    "reference_id": "USN-4587-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4587-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928990?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.11%2Bdfsg-1.2?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.11%252Bdfsg-1.2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928983?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.13%2Bdfsg-2%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.13%252Bdfsg-2%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928981?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.14%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.14%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928985?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928984?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-2?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1000450?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1072636?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-4?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-4%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2018-20023"
            ],
            "risk_score": 1.9,
            "exploitability": "0.5",
            "weighted_severity": "3.9",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9nha-t527-rfhs"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/30946?format=api",
            "vulnerability_id": "VCID-bngs-4nkn-rbh1",
            "summary": "Multiple vulnerabilities have been found in ssvnc, the worst of\n    which could result in the arbitrary execution of code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20022.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.4",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20022.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-20022",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9079",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90796",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90808",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90818",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90829",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90836",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90844",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90842",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90866",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90864",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90863",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90877",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90875",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90873",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90888",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90905",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90918",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90915",
                            "published_at": "2026-05-11T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90925",
                            "published_at": "2026-05-12T12:55:00Z"
                        },
                        {
                            "value": "0.06177",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90936",
                            "published_at": "2026-05-14T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-20022"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.4",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661123",
                    "reference_id": "1661123",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661123"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941",
                    "reference_id": "916941",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945827",
                    "reference_id": "945827",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945827"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201908-05",
                    "reference_id": "GLSA-201908-05",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201908-05"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202006-06",
                    "reference_id": "GLSA-202006-06",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202006-06"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3877-1/",
                    "reference_id": "USN-3877-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3877-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4547-1/",
                    "reference_id": "USN-4547-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4547-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4547-2/",
                    "reference_id": "USN-4547-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4547-2/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4587-1/",
                    "reference_id": "USN-4587-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4587-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928990?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.11%2Bdfsg-1.2?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.11%252Bdfsg-1.2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928983?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.13%2Bdfsg-2%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.13%252Bdfsg-2%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928981?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.14%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.14%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928985?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928984?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-2?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1000450?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1072636?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-4?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-4%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2018-20022"
            ],
            "risk_score": 2.5,
            "exploitability": "0.5",
            "weighted_severity": "4.9",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bngs-4nkn-rbh1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/30945?format=api",
            "vulnerability_id": "VCID-du88-cbhp-rkcc",
            "summary": "Multiple vulnerabilities have been found in ssvnc, the worst of\n    which could result in the arbitrary execution of code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20021.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20021.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-20021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85421",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85433",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85453",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85456",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85477",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85485",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85499",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85498",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85494",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85518",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85522",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85519",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85541",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8555",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85548",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85566",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85589",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85608",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85604",
                            "published_at": "2026-05-11T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85617",
                            "published_at": "2026-05-12T12:55:00Z"
                        },
                        {
                            "value": "0.02552",
                            "scoring_system": "epss",
                            "scoring_elements": "0.85653",
                            "published_at": "2026-05-14T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-20021"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661120",
                    "reference_id": "1661120",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661120"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941",
                    "reference_id": "916941",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945827",
                    "reference_id": "945827",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945827"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201908-05",
                    "reference_id": "GLSA-201908-05",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201908-05"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202006-06",
                    "reference_id": "GLSA-202006-06",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202006-06"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3877-1/",
                    "reference_id": "USN-3877-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3877-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4547-1/",
                    "reference_id": "USN-4547-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4547-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4547-2/",
                    "reference_id": "USN-4547-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4547-2/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4587-1/",
                    "reference_id": "USN-4587-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4587-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928990?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.11%2Bdfsg-1.2?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.11%252Bdfsg-1.2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928983?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.13%2Bdfsg-2%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.13%252Bdfsg-2%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928981?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.14%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.14%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928985?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928984?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-2?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1000450?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1072636?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-4?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-4%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2018-20021"
            ],
            "risk_score": 3.0,
            "exploitability": "0.5",
            "weighted_severity": "5.9",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-du88-cbhp-rkcc"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/74010?format=api",
            "vulnerability_id": "VCID-e3u6-fpje-tubq",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15126.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15126.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-15126",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90553",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90557",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90568",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90576",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90588",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90594",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90603",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90597",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90616",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90613",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9061",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90626",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90628",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90624",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90637",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90656",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90669",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90667",
                            "published_at": "2026-05-11T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.90676",
                            "published_at": "2026-05-12T12:55:00Z"
                        },
                        {
                            "value": "0.059",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9069",
                            "published_at": "2026-05-14T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-15126"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661110",
                    "reference_id": "1661110",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661110"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941",
                    "reference_id": "916941",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3877-1/",
                    "reference_id": "USN-3877-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3877-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928990?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.11%2Bdfsg-1.2?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.11%252Bdfsg-1.2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928983?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.13%2Bdfsg-2%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.13%252Bdfsg-2%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928981?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.14%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.14%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928985?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928984?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-2?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1000450?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1072636?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-4?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-4%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2018-15126"
            ],
            "risk_score": 3.4,
            "exploitability": "0.5",
            "weighted_severity": "6.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e3u6-fpje-tubq"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/74013?format=api",
            "vulnerability_id": "VCID-h8bk-uaqv-puap",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21247.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21247.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-21247",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.80914",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.80923",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.80945",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.80942",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8097",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.80977",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.80994",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8098",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.80972",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81009",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8101",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81011",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81033",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81042",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81048",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81064",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81085",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81108",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81103",
                            "published_at": "2026-05-11T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81121",
                            "published_at": "2026-05-12T12:55:00Z"
                        },
                        {
                            "value": "0.01477",
                            "scoring_system": "epss",
                            "scoring_elements": "0.81162",
                            "published_at": "2026-05-14T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-21247"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1849886",
                    "reference_id": "1849886",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1849886"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2021:1811",
                    "reference_id": "RHSA-2021:1811",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2021:1811"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928990?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.11%2Bdfsg-1.2?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.11%252Bdfsg-1.2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928983?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.13%2Bdfsg-2%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.13%252Bdfsg-2%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928981?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.14%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.14%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928985?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928984?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-2?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1000450?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1072636?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-4?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-4%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2018-21247"
            ],
            "risk_score": 3.4,
            "exploitability": "0.5",
            "weighted_severity": "6.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h8bk-uaqv-puap"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/74009?format=api",
            "vulnerability_id": "VCID-nw65-u5bu-yqbv",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6307.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6307.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-6307",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92796",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92802",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92807",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92805",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92814",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92818",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92823",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92822",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92833",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92834",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92838",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92845",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92847",
                            "published_at": "2026-04-26T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92842",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92851",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92864",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92876",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9288",
                            "published_at": "2026-05-11T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92887",
                            "published_at": "2026-05-12T12:55:00Z"
                        },
                        {
                            "value": "0.09475",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92911",
                            "published_at": "2026-05-14T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-6307"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661136",
                    "reference_id": "1661136",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661136"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941",
                    "reference_id": "916941",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3877-1/",
                    "reference_id": "USN-3877-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3877-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928990?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.11%2Bdfsg-1.2?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.11%252Bdfsg-1.2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928983?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.13%2Bdfsg-2%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.13%252Bdfsg-2%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928981?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.14%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.14%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928985?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928984?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-2?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1000450?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1072636?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-4?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-4%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2018-6307"
            ],
            "risk_score": 3.4,
            "exploitability": "0.5",
            "weighted_severity": "6.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nw65-u5bu-yqbv"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/30947?format=api",
            "vulnerability_id": "VCID-q89b-2emb-j3br",
            "summary": "Multiple vulnerabilities have been found in ssvnc, the worst of\n    which could result in the arbitrary execution of code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20024.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20024.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-20024",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.87937",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.87947",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8796",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.87964",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.87984",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.87991",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88002",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.87995",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.87994",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88008",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88007",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88023",
                            "published_at": "2026-04-24T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88029",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8804",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88056",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88071",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88069",
                            "published_at": "2026-05-11T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88082",
                            "published_at": "2026-05-12T12:55:00Z"
                        },
                        {
                            "value": "0.03729",
                            "scoring_system": "epss",
                            "scoring_elements": "0.88113",
                            "published_at": "2026-05-14T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-20024"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661132",
                    "reference_id": "1661132",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661132"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941",
                    "reference_id": "916941",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945827",
                    "reference_id": "945827",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945827"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201908-05",
                    "reference_id": "GLSA-201908-05",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201908-05"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202006-06",
                    "reference_id": "GLSA-202006-06",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202006-06"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3877-1/",
                    "reference_id": "USN-3877-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3877-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4547-1/",
                    "reference_id": "USN-4547-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4547-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4547-2/",
                    "reference_id": "USN-4547-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4547-2/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4587-1/",
                    "reference_id": "USN-4587-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4587-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928990?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.11%2Bdfsg-1.2?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.11%252Bdfsg-1.2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928983?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.13%2Bdfsg-2%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.13%252Bdfsg-2%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928981?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.14%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.14%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928985?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928984?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-2?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1000450?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1072636?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-4?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-4%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2018-20024"
            ],
            "risk_score": 3.0,
            "exploitability": "0.5",
            "weighted_severity": "5.9",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-q89b-2emb-j3br"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38619?format=api",
            "vulnerability_id": "VCID-vywb-buqd-w3dw",
            "summary": "Multiple vulnerabilities have been found in LibVNCServer, the worst\n    of which could result in the arbitrary execution of code.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20019.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "8.8",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20019.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-20019",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94919",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94927",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94929",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94931",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94939",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94943",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94947",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9495",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94952",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9496",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94963",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94967",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94976",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94982",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94991",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94996",
                            "published_at": "2026-05-11T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95",
                            "published_at": "2026-05-12T12:55:00Z"
                        },
                        {
                            "value": "0.168",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95012",
                            "published_at": "2026-05-14T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-20019"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "8.8",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661114",
                    "reference_id": "1661114",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661114"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941",
                    "reference_id": "916941",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201908-05",
                    "reference_id": "GLSA-201908-05",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201908-05"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3877-1/",
                    "reference_id": "USN-3877-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3877-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4547-1/",
                    "reference_id": "USN-4547-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4547-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4587-1/",
                    "reference_id": "USN-4587-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4587-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928990?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.11%2Bdfsg-1.2?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.11%252Bdfsg-1.2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928983?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.13%2Bdfsg-2%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.13%252Bdfsg-2%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928981?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.14%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.14%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928985?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928984?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-2?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1000450?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1072636?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-4?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-4%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2018-20019"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "7.9",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vywb-buqd-w3dw"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/74011?format=api",
            "vulnerability_id": "VCID-xqer-ndmy-gfgp",
            "summary": "security update",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15127.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15127.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-15127",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94555",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94563",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9457",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94572",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94582",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94586",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94589",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94592",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94605",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94609",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94613",
                            "published_at": "2026-04-21T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94615",
                            "published_at": "2026-04-29T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94623",
                            "published_at": "2026-05-05T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94631",
                            "published_at": "2026-05-07T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9464",
                            "published_at": "2026-05-09T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94646",
                            "published_at": "2026-05-11T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94651",
                            "published_at": "2026-05-12T12:55:00Z"
                        },
                        {
                            "value": "0.15138",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94665",
                            "published_at": "2026-05-14T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-15127"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "9.8",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661102",
                    "reference_id": "1661102",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661102"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941",
                    "reference_id": "916941",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916941"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:0059",
                    "reference_id": "RHSA-2019:0059",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:0059"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3877-1/",
                    "reference_id": "USN-3877-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3877-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4547-1/",
                    "reference_id": "USN-4547-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4547-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/4587-1/",
                    "reference_id": "USN-4587-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/4587-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928990?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.11%2Bdfsg-1.2?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.11%252Bdfsg-1.2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928983?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.13%2Bdfsg-2%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.13%252Bdfsg-2%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928981?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.14%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.14%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928985?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/928984?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-2?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-81pq-5gvp-zfgw"
                        },
                        {
                            "vulnerability": "VCID-aphg-42c4-9yct"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1000450?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/1072636?format=api",
                    "purl": "pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-4?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.15%252Bdfsg-4%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2018-15127"
            ],
            "risk_score": 3.4,
            "exploitability": "0.5",
            "weighted_severity": "6.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xqer-ndmy-gfgp"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvncserver@0.9.11%252Bdfsg-1.2%3Fdistro=trixie"
}