{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/12027?format=json","vulnerability_id":"VCID-g6p1-25m8-hyak","summary":"JSON-lib mishandles an unbalanced comment string\nutil/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.","aliases":[{"alias":"CVE-2024-47855"},{"alias":"GHSA-wwcp-26wc-3fxm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/927744?format=json","purl":"pkg:deb/debian/libjson-java@3.1.0%2Bdfsg-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libjson-java@3.1.0%252Bdfsg-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/994718?format=json","purl":"pkg:deb/debian/libjson-java@3.1.0%2Bdfsg-2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libjson-java@3.1.0%252Bdfsg-2"},{"url":"http://public2.vulnerablecode.io/api/packages/927745?format=json","purl":"pkg:deb/debian/libjson-java@3.1.0%2Bdfsg-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libjson-java@3.1.0%252Bdfsg-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/927743?format=json","purl":"pkg:deb/debian/libjson-java@3.2.0%2Bdfsg-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libjson-java@3.2.0%252Bdfsg-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/43182?format=json","purl":"pkg:maven/org.kordamp.json/json-lib-core@3.1.0","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.kordamp.json/json-lib-core@3.1.0"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/994717?format=json","purl":"pkg:deb/debian/libjson-java@2.4-3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-tp9p-km7u-wbd5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libjson-java@2.4-3.1"},{"url":"http://public2.vulnerablecode.io/api/packages/927742?format=json","purl":"pkg:deb/debian/libjson-java@2.4-3.1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-tp9p-km7u-wbd5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libjson-java@2.4-3.1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1068212?format=json","purl":"pkg:maven/net.sf.json-lib/json-lib@1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/net.sf.json-lib/json-lib@1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1068213?format=json","purl":"pkg:maven/net.sf.json-lib/json-lib@1.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/net.sf.json-lib/json-lib@1.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/1068214?format=json","purl":"pkg:maven/net.sf.json-lib/json-lib@1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/net.sf.json-lib/json-lib@1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/1068215?format=json","purl":"pkg:maven/net.sf.json-lib/json-lib@2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/net.sf.json-lib/json-lib@2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1068216?format=json","purl":"pkg:maven/net.sf.json-lib/json-lib@2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/net.sf.json-lib/json-lib@2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/1068217?format=json","purl":"pkg:maven/net.sf.json-lib/json-lib@2.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/net.sf.json-lib/json-lib@2.2"},{"url":"http://public2.vulnerablecode.io/api/packages/1068218?format=json","purl":"pkg:maven/net.sf.json-lib/json-lib@2.2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/net.sf.json-lib/json-lib@2.2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/1068219?format=json","purl":"pkg:maven/net.sf.json-lib/json-lib@2.2.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/net.sf.json-lib/json-lib@2.2.2"},{"url":"http://public2.vulnerablecode.io/api/packages/1067839?format=json","purl":"pkg:maven/net.sf.json-lib/json-lib@2.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/net.sf.json-lib/json-lib@2.4"},{"url":"http://public2.vulnerablecode.io/api/packages/1112762?format=json","purl":"pkg:maven/net.sf.json-lib/json-lib@2.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/net.sf.json-lib/json-lib@2.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/718574?format=json","purl":"pkg:maven/org.kordamp.json/json-lib-core@3.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.kordamp.json/json-lib-core@3.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/718575?format=json","purl":"pkg:maven/org.kordamp.json/json-lib-core@3.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.kordamp.json/json-lib-core@3.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/718576?format=json","purl":"pkg:maven/org.kordamp.json/json-lib-core@3.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g6p1-25m8-hyak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.kordamp.json/json-lib-core@3.0.3"},{"url":"http://public2.vulnerablecode.io/api/packages/91947?format=json","purl":"pkg:rpm/redhat/jenkins@2.479.3.1739859586-3?arch=el9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fcg2-x3s5-wudk"},{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-napj-3e58-nqav"},{"vulnerability":"VCID-rx46-cr1m-uuge"},{"vulnerability":"VCID-ufjq-w47y-3qeq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins@2.479.3.1739859586-3%3Farch=el9"},{"url":"http://public2.vulnerablecode.io/api/packages/91950?format=json","purl":"pkg:rpm/redhat/jenkins@2.479.3.1739896390-3?arch=el9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fcg2-x3s5-wudk"},{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-napj-3e58-nqav"},{"vulnerability":"VCID-rx46-cr1m-uuge"},{"vulnerability":"VCID-ufjq-w47y-3qeq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins@2.479.3.1739896390-3%3Farch=el9"},{"url":"http://public2.vulnerablecode.io/api/packages/91946?format=json","purl":"pkg:rpm/redhat/jenkins@2.479.3.1740051993-3?arch=el8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fcg2-x3s5-wudk"},{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-napj-3e58-nqav"},{"vulnerability":"VCID-rx46-cr1m-uuge"},{"vulnerability":"VCID-ufjq-w47y-3qeq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins@2.479.3.1740051993-3%3Farch=el8"},{"url":"http://public2.vulnerablecode.io/api/packages/91941?format=json","purl":"pkg:rpm/redhat/jenkins@2.479.3.1740109575-3?arch=el8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fcg2-x3s5-wudk"},{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-napj-3e58-nqav"},{"vulnerability":"VCID-rx46-cr1m-uuge"},{"vulnerability":"VCID-ufjq-w47y-3qeq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins@2.479.3.1740109575-3%3Farch=el8"},{"url":"http://public2.vulnerablecode.io/api/packages/91414?format=json","purl":"pkg:rpm/redhat/jenkins@2.479.3.1740464431-3?arch=el8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fcg2-x3s5-wudk"},{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-napj-3e58-nqav"},{"vulnerability":"VCID-pgad-nzjx-kkb5"},{"vulnerability":"VCID-rx46-cr1m-uuge"},{"vulnerability":"VCID-ufjq-w47y-3qeq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins@2.479.3.1740464431-3%3Farch=el8"},{"url":"http://public2.vulnerablecode.io/api/packages/91943?format=json","purl":"pkg:rpm/redhat/jenkins@2.479.3.1740464433-3?arch=el8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fcg2-x3s5-wudk"},{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-napj-3e58-nqav"},{"vulnerability":"VCID-rx46-cr1m-uuge"},{"vulnerability":"VCID-ufjq-w47y-3qeq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins@2.479.3.1740464433-3%3Farch=el8"},{"url":"http://public2.vulnerablecode.io/api/packages/91415?format=json","purl":"pkg:rpm/redhat/jenkins-2-plugins@4.12.1740464689-1?arch=el8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fcg2-x3s5-wudk"},{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-napj-3e58-nqav"},{"vulnerability":"VCID-pgad-nzjx-kkb5"},{"vulnerability":"VCID-rx46-cr1m-uuge"},{"vulnerability":"VCID-ufjq-w47y-3qeq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@4.12.1740464689-1%3Farch=el8"},{"url":"http://public2.vulnerablecode.io/api/packages/91948?format=json","purl":"pkg:rpm/redhat/jenkins-2-plugins@4.13.1740464698-1?arch=el8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fcg2-x3s5-wudk"},{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-napj-3e58-nqav"},{"vulnerability":"VCID-rx46-cr1m-uuge"},{"vulnerability":"VCID-ufjq-w47y-3qeq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@4.13.1740464698-1%3Farch=el8"},{"url":"http://public2.vulnerablecode.io/api/packages/91944?format=json","purl":"pkg:rpm/redhat/jenkins-2-plugins@4.14.1740109868-1?arch=el8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fcg2-x3s5-wudk"},{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-napj-3e58-nqav"},{"vulnerability":"VCID-rx46-cr1m-uuge"},{"vulnerability":"VCID-ufjq-w47y-3qeq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@4.14.1740109868-1%3Farch=el8"},{"url":"http://public2.vulnerablecode.io/api/packages/91942?format=json","purl":"pkg:rpm/redhat/jenkins-2-plugins@4.15.1740052174-1?arch=el8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fcg2-x3s5-wudk"},{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-napj-3e58-nqav"},{"vulnerability":"VCID-rx46-cr1m-uuge"},{"vulnerability":"VCID-ufjq-w47y-3qeq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@4.15.1740052174-1%3Farch=el8"},{"url":"http://public2.vulnerablecode.io/api/packages/91945?format=json","purl":"pkg:rpm/redhat/jenkins-2-plugins@4.16.1739896683-1?arch=el9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fcg2-x3s5-wudk"},{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-napj-3e58-nqav"},{"vulnerability":"VCID-rx46-cr1m-uuge"},{"vulnerability":"VCID-ufjq-w47y-3qeq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@4.16.1739896683-1%3Farch=el9"},{"url":"http://public2.vulnerablecode.io/api/packages/91949?format=json","purl":"pkg:rpm/redhat/jenkins-2-plugins@4.17.1739859908-1?arch=el9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fcg2-x3s5-wudk"},{"vulnerability":"VCID-g6p1-25m8-hyak"},{"vulnerability":"VCID-napj-3e58-nqav"},{"vulnerability":"VCID-rx46-cr1m-uuge"},{"vulnerability":"VCID-ufjq-w47y-3qeq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@4.17.1739859908-1%3Farch=el9"}],"references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47855.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47855.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-47855","reference_id":"","reference_type":"","scores":[{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.89034","published_at":"2026-05-16T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.89036","published_at":"2026-05-15T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.89026","published_at":"2026-05-14T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.89007","published_at":"2026-05-12T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.88998","published_at":"2026-05-11T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.89004","published_at":"2026-05-09T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.88994","published_at":"2026-05-07T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.8898","published_at":"2026-05-05T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.88973","published_at":"2026-04-29T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.88965","published_at":"2026-04-24T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.88948","published_at":"2026-04-21T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.88952","published_at":"2026-04-18T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.88954","published_at":"2026-04-16T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.88941","published_at":"2026-04-13T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.88947","published_at":"2026-04-11T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.88894","published_at":"2026-04-02T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.8891","published_at":"2026-04-04T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.88912","published_at":"2026-04-07T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.88935","published_at":"2026-04-09T12:55:00Z"},{"value":"0.04347","scoring_system":"epss","scoring_elements":"0.8893","published_at":"2026-04-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-47855"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47855","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47855"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/kordamp/json-lib","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/kordamp/json-lib"},{"reference_url":"https://github.com/kordamp/json-lib/blob/35a1f2aa22bac260438c0cf2399549311b5a21aa/pom.xml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/kordamp/json-lib/blob/35a1f2aa22bac260438c0cf2399549311b5a21aa/pom.xml"},{"reference_url":"https://github.com/kordamp/json-lib/commit/a0c4a0eae277130e22979cf307c95dec4005a78e","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-04T16:10:57Z/"}],"url":"https://github.com/kordamp/json-lib/commit/a0c4a0eae277130e22979cf307c95dec4005a78e"},{"reference_url":"https://github.com/kordamp/json-lib/compare/v3.0.3...v3.1.0","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-04T16:10:57Z/"}],"url":"https://github.com/kordamp/json-lib/compare/v3.0.3...v3.1.0"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47855","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47855"},{"reference_url":"https://sourceforge.net/projects/json-lib","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://sourceforge.net/projects/json-lib"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1084191","reference_id":"1084191","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1084191"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316421","reference_id":"2316421","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316421"},{"reference_url":"https://github.com/advisories/GHSA-wwcp-26wc-3fxm","reference_id":"GHSA-wwcp-26wc-3fxm","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-wwcp-26wc-3fxm"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:2218","reference_id":"RHSA-2025:2218","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:2218"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:2219","reference_id":"RHSA-2025:2219","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:2219"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:2220","reference_id":"RHSA-2025:2220","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:2220"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:2221","reference_id":"RHSA-2025:2221","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:2221"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:2222","reference_id":"RHSA-2025:2222","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:2222"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:2223","reference_id":"RHSA-2025:2223","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:2223"}],"weaknesses":[{"cwe_id":1286,"name":"Improper Validation of Syntactic Correctness of Input","description":"The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"4.0 - 6.9","exploitability":"0.5","weighted_severity":"6.2","risk_score":3.1,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-g6p1-25m8-hyak"}