{"url":"http://public2.vulnerablecode.io/api/packages/990585?format=json","purl":"pkg:apk/alpine/python3@3.12.9-r0?arch=s390x&distroversion=v3.21&reponame=main","type":"apk","namespace":"alpine","name":"python3","version":"3.12.9-r0","qualifiers":{"arch":"s390x","distroversion":"v3.21","reponame":"main"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"3.12.10-r1","latest_non_vulnerable_version":"3.12.11-r0","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/71919?format=json","vulnerability_id":"VCID-e6sb-bh7v-9ugg","summary":"python: cpython: URL parser allowed square brackets in domain names","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-0938.json","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-0938.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-0938","reference_id":"","reference_type":"","scores":[{"value":"0.01412","scoring_system":"epss","scoring_elements":"0.80562","published_at":"2026-04-21T12:55:00Z"},{"value":"0.0148","scoring_system":"epss","scoring_elements":"0.81064","published_at":"2026-04-29T12:55:00Z"},{"value":"0.0148","scoring_system":"epss","scoring_elements":"0.81049","published_at":"2026-04-24T12:55:00Z"},{"value":"0.0148","scoring_system":"epss","scoring_elements":"0.81057","published_at":"2026-04-26T12:55:00Z"},{"value":"0.01561","scoring_system":"epss","scoring_elements":"0.81448","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01561","scoring_system":"epss","scoring_elements":"0.81482","published_at":"2026-04-13T12:55:00Z"},{"value":"0.01561","scoring_system":"epss","scoring_elements":"0.81489","published_at":"2026-04-12T12:55:00Z"},{"value":"0.01561","scoring_system":"epss","scoring_elements":"0.81426","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01561","scoring_system":"epss","scoring_elements":"0.81501","published_at":"2026-04-11T12:55:00Z"},{"value":"0.01561","scoring_system":"epss","scoring_elements":"0.8148","published_at":"2026-04-09T12:55:00Z"},{"value":"0.01561","scoring_system":"epss","scoring_elements":"0.81474","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01561","scoring_system":"epss","scoring_elements":"0.81446","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01728","scoring_system":"epss","scoring_elements":"0.82481","published_at":"2026-04-18T12:55:00Z"},{"value":"0.01728","scoring_system":"epss","scoring_elements":"0.8248","published_at":"2026-04-16T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-0938"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0938","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0938"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/python/cpython/issues/105704","reference_id":"105704","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:16Z/"}],"url":"https://github.com/python/cpython/issues/105704"},{"reference_url":"https://github.com/python/cpython/pull/129418","reference_id":"129418","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:16Z/"}],"url":"https://github.com/python/cpython/pull/129418"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343237","reference_id":"2343237","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343237"},{"reference_url":"https://github.com/python/cpython/commit/526617ed68cde460236c973e5d0a8bad4de896ba","reference_id":"526617ed68cde460236c973e5d0a8bad4de896ba","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:16Z/"}],"url":"https://github.com/python/cpython/commit/526617ed68cde460236c973e5d0a8bad4de896ba"},{"reference_url":"https://github.com/python/cpython/commit/90e526ae67b172ed7c6c56e7edad36263b0f9403","reference_id":"90e526ae67b172ed7c6c56e7edad36263b0f9403","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:16Z/"}],"url":"https://github.com/python/cpython/commit/90e526ae67b172ed7c6c56e7edad36263b0f9403"},{"reference_url":"https://github.com/python/cpython/commit/a7084f6075c9595ba60119ce8c62f1496f50c568","reference_id":"a7084f6075c9595ba60119ce8c62f1496f50c568","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:16Z/"}],"url":"https://github.com/python/cpython/commit/a7084f6075c9595ba60119ce8c62f1496f50c568"},{"reference_url":"https://github.com/python/cpython/commit/b8b4b713c5f8ec0958c7ef8d29d6711889bc94ab","reference_id":"b8b4b713c5f8ec0958c7ef8d29d6711889bc94ab","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:16Z/"}],"url":"https://github.com/python/cpython/commit/b8b4b713c5f8ec0958c7ef8d29d6711889bc94ab"},{"reference_url":"https://github.com/python/cpython/commit/d89a5f6a6e65511a5f6e0618c4c30a7aa5aba56a","reference_id":"d89a5f6a6e65511a5f6e0618c4c30a7aa5aba56a","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:16Z/"}],"url":"https://github.com/python/cpython/commit/d89a5f6a6e65511a5f6e0618c4c30a7aa5aba56a"},{"reference_url":"https://github.com/python/cpython/commit/ff4e5c25666f63544071a6b075ae8b25c98b7a32","reference_id":"ff4e5c25666f63544071a6b075ae8b25c98b7a32","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:16Z/"}],"url":"https://github.com/python/cpython/commit/ff4e5c25666f63544071a6b075ae8b25c98b7a32"},{"reference_url":"https://mail.python.org/archives/list/security-announce@python.org/thread/K4EUG6EKV6JYFIC24BASYOZS4M5XOQIB/","reference_id":"K4EUG6EKV6JYFIC24BASYOZS4M5XOQIB","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:16Z/"}],"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/K4EUG6EKV6JYFIC24BASYOZS4M5XOQIB/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:23530","reference_id":"RHSA-2025:23530","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:23530"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:6977","reference_id":"RHSA-2025:6977","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:6977"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:7107","reference_id":"RHSA-2025:7107","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:7107"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:7109","reference_id":"RHSA-2025:7109","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:7109"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:8385","reference_id":"RHSA-2025:8385","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:8385"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5588","reference_id":"RHSA-2026:5588","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5588"},{"reference_url":"https://usn.ubuntu.com/7280-1/","reference_id":"USN-7280-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7280-1/"},{"reference_url":"https://usn.ubuntu.com/7280-2/","reference_id":"USN-7280-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7280-2/"},{"reference_url":"https://usn.ubuntu.com/7280-3/","reference_id":"USN-7280-3","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7280-3/"},{"reference_url":"https://usn.ubuntu.com/7348-1/","reference_id":"USN-7348-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7348-1/"},{"reference_url":"https://usn.ubuntu.com/7348-2/","reference_id":"USN-7348-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7348-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/990585?format=json","purl":"pkg:apk/alpine/python3@3.12.9-r0?arch=s390x&distroversion=v3.21&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python3@3.12.9-r0%3Farch=s390x&distroversion=v3.21&reponame=main"}],"aliases":["CVE-2025-0938"],"risk_score":3.0,"exploitability":"0.5","weighted_severity":"6.1","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-e6sb-bh7v-9ugg"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python3@3.12.9-r0%3Farch=s390x&distroversion=v3.21&reponame=main"}