GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/15372?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/15372?format=api",
    "vulnerability_id": "VCID-m3dg-q4eg-wyfb",
    "summary": "TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code\nThe Color Picker Wizard component in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, and 6.1.0 before 6.1.9 allows remote authenticated editors to execute arbitrary PHP code via a serialized PHP object.",
    "aliases": [
        {
            "alias": "CVE-2014-3942"
        },
        {
            "alias": "GHSA-55g3-fjwm-w2c8"
        }
    ],
    "fixed_packages": [],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/49855?format=api",
            "purl": "pkg:composer/typo3/cms@4.5.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1c26-d6gv-4ud4"
                },
                {
                    "vulnerability": "VCID-2zuf-yf2d-t3hg"
                },
                {
                    "vulnerability": "VCID-57cn-dmzh-4kdq"
                },
                {
                    "vulnerability": "VCID-59zz-tmvz-sqgm"
                },
                {
                    "vulnerability": "VCID-88ng-ph1q-cybw"
                },
                {
                    "vulnerability": "VCID-8fcj-b2dq-3qav"
                },
                {
                    "vulnerability": "VCID-93v3-exum-5qf5"
                },
                {
                    "vulnerability": "VCID-99uu-rfrf-bqa7"
                },
                {
                    "vulnerability": "VCID-9j2h-q1n5-kbgt"
                },
                {
                    "vulnerability": "VCID-b7s9-hkwv-63ht"
                },
                {
                    "vulnerability": "VCID-d79s-4kzk-hugy"
                },
                {
                    "vulnerability": "VCID-dban-xxn2-f3b2"
                },
                {
                    "vulnerability": "VCID-fprf-zjud-8fcv"
                },
                {
                    "vulnerability": "VCID-fv74-gq28-rkd5"
                },
                {
                    "vulnerability": "VCID-g75m-m11u-7fbj"
                },
                {
                    "vulnerability": "VCID-hpju-vhzg-jyes"
                },
                {
                    "vulnerability": "VCID-jb2j-eygc-n7b7"
                },
                {
                    "vulnerability": "VCID-jk5g-64sn-ffgx"
                },
                {
                    "vulnerability": "VCID-m3dg-q4eg-wyfb"
                },
                {
                    "vulnerability": "VCID-n177-3cym-d7e7"
                },
                {
                    "vulnerability": "VCID-nvd8-5j51-2yeg"
                },
                {
                    "vulnerability": "VCID-p8m8-y53c-cubn"
                },
                {
                    "vulnerability": "VCID-tu8v-rv87-wfa3"
                },
                {
                    "vulnerability": "VCID-v3xx-f132-g3hn"
                },
                {
                    "vulnerability": "VCID-vbbx-pk8m-jfhd"
                },
                {
                    "vulnerability": "VCID-xb19-n4s4-rqc9"
                },
                {
                    "vulnerability": "VCID-xns2-f7um-qqgn"
                },
                {
                    "vulnerability": "VCID-y6zm-rwrr-m3ah"
                },
                {
                    "vulnerability": "VCID-y9d1-wwne-hba5"
                },
                {
                    "vulnerability": "VCID-ybdc-993m-aqfu"
                },
                {
                    "vulnerability": "VCID-yk4b-baue-rkbt"
                },
                {
                    "vulnerability": "VCID-yytp-t23g-wkc8"
                },
                {
                    "vulnerability": "VCID-zbvd-rppy-gyab"
                },
                {
                    "vulnerability": "VCID-zqqe-vew2-nbfk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@4.5.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/54353?format=api",
            "purl": "pkg:composer/typo3/cms@4.7.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-57cn-dmzh-4kdq"
                },
                {
                    "vulnerability": "VCID-59zz-tmvz-sqgm"
                },
                {
                    "vulnerability": "VCID-8fcj-b2dq-3qav"
                },
                {
                    "vulnerability": "VCID-9j2h-q1n5-kbgt"
                },
                {
                    "vulnerability": "VCID-b7s9-hkwv-63ht"
                },
                {
                    "vulnerability": "VCID-d79s-4kzk-hugy"
                },
                {
                    "vulnerability": "VCID-dban-xxn2-f3b2"
                },
                {
                    "vulnerability": "VCID-g75m-m11u-7fbj"
                },
                {
                    "vulnerability": "VCID-hpju-vhzg-jyes"
                },
                {
                    "vulnerability": "VCID-jb2j-eygc-n7b7"
                },
                {
                    "vulnerability": "VCID-m3dg-q4eg-wyfb"
                },
                {
                    "vulnerability": "VCID-p8m8-y53c-cubn"
                },
                {
                    "vulnerability": "VCID-v3xx-f132-g3hn"
                },
                {
                    "vulnerability": "VCID-vbbx-pk8m-jfhd"
                },
                {
                    "vulnerability": "VCID-xns2-f7um-qqgn"
                },
                {
                    "vulnerability": "VCID-y6zm-rwrr-m3ah"
                },
                {
                    "vulnerability": "VCID-y9d1-wwne-hba5"
                },
                {
                    "vulnerability": "VCID-yytp-t23g-wkc8"
                },
                {
                    "vulnerability": "VCID-zbvd-rppy-gyab"
                },
                {
                    "vulnerability": "VCID-zqqe-vew2-nbfk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@4.7.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/54354?format=api",
            "purl": "pkg:composer/typo3/cms@6.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-635d-efe6-bbgm"
                },
                {
                    "vulnerability": "VCID-9j2h-q1n5-kbgt"
                },
                {
                    "vulnerability": "VCID-b5ht-z6zp-pbht"
                },
                {
                    "vulnerability": "VCID-d79s-4kzk-hugy"
                },
                {
                    "vulnerability": "VCID-m3dg-q4eg-wyfb"
                },
                {
                    "vulnerability": "VCID-nsh9-8twn-6ydn"
                },
                {
                    "vulnerability": "VCID-p8m8-y53c-cubn"
                },
                {
                    "vulnerability": "VCID-vbbx-pk8m-jfhd"
                },
                {
                    "vulnerability": "VCID-y9d1-wwne-hba5"
                },
                {
                    "vulnerability": "VCID-zqqe-vew2-nbfk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/54355?format=api",
            "purl": "pkg:composer/typo3/cms@6.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-59zz-tmvz-sqgm"
                },
                {
                    "vulnerability": "VCID-635d-efe6-bbgm"
                },
                {
                    "vulnerability": "VCID-9j2h-q1n5-kbgt"
                },
                {
                    "vulnerability": "VCID-d79s-4kzk-hugy"
                },
                {
                    "vulnerability": "VCID-hpju-vhzg-jyes"
                },
                {
                    "vulnerability": "VCID-m3dg-q4eg-wyfb"
                },
                {
                    "vulnerability": "VCID-nsh9-8twn-6ydn"
                },
                {
                    "vulnerability": "VCID-p8m8-y53c-cubn"
                },
                {
                    "vulnerability": "VCID-vbbx-pk8m-jfhd"
                },
                {
                    "vulnerability": "VCID-y9d1-wwne-hba5"
                },
                {
                    "vulnerability": "VCID-zqqe-vew2-nbfk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/571360?format=api",
            "purl": "pkg:deb/debian/typo3-src@4.0.2%2Bdebian-3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-133h-9erq-2fhy"
                },
                {
                    "vulnerability": "VCID-4auu-re6t-p3gu"
                },
                {
                    "vulnerability": "VCID-5rae-psy2-dba5"
                },
                {
                    "vulnerability": "VCID-75re-n41m-y3et"
                },
                {
                    "vulnerability": "VCID-8ahj-xadv-xbhr"
                },
                {
                    "vulnerability": "VCID-9j2h-q1n5-kbgt"
                },
                {
                    "vulnerability": "VCID-d79s-4kzk-hugy"
                },
                {
                    "vulnerability": "VCID-ftr5-c6nt-gbh4"
                },
                {
                    "vulnerability": "VCID-m3dg-q4eg-wyfb"
                },
                {
                    "vulnerability": "VCID-mrst-4yau-ubce"
                },
                {
                    "vulnerability": "VCID-p8m8-y53c-cubn"
                },
                {
                    "vulnerability": "VCID-vgwd-1z7m-gkh8"
                },
                {
                    "vulnerability": "VCID-wxg4-7yap-3qdx"
                },
                {
                    "vulnerability": "VCID-y9d1-wwne-hba5"
                },
                {
                    "vulnerability": "VCID-yadx-n3tq-rkdb"
                },
                {
                    "vulnerability": "VCID-zqqe-vew2-nbfk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/typo3-src@4.0.2%252Bdebian-3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/571361?format=api",
            "purl": "pkg:deb/debian/typo3-src@4.0.2%2Bdebian-9",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-133h-9erq-2fhy"
                },
                {
                    "vulnerability": "VCID-4auu-re6t-p3gu"
                },
                {
                    "vulnerability": "VCID-5rae-psy2-dba5"
                },
                {
                    "vulnerability": "VCID-75re-n41m-y3et"
                },
                {
                    "vulnerability": "VCID-8ahj-xadv-xbhr"
                },
                {
                    "vulnerability": "VCID-9j2h-q1n5-kbgt"
                },
                {
                    "vulnerability": "VCID-d79s-4kzk-hugy"
                },
                {
                    "vulnerability": "VCID-ftr5-c6nt-gbh4"
                },
                {
                    "vulnerability": "VCID-m3dg-q4eg-wyfb"
                },
                {
                    "vulnerability": "VCID-mrst-4yau-ubce"
                },
                {
                    "vulnerability": "VCID-p8m8-y53c-cubn"
                },
                {
                    "vulnerability": "VCID-vgwd-1z7m-gkh8"
                },
                {
                    "vulnerability": "VCID-wxg4-7yap-3qdx"
                },
                {
                    "vulnerability": "VCID-y9d1-wwne-hba5"
                },
                {
                    "vulnerability": "VCID-yadx-n3tq-rkdb"
                },
                {
                    "vulnerability": "VCID-zqqe-vew2-nbfk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/typo3-src@4.0.2%252Bdebian-9"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/571362?format=api",
            "purl": "pkg:deb/debian/typo3-src@4.2.5-1%2Blenny9",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-133h-9erq-2fhy"
                },
                {
                    "vulnerability": "VCID-4auu-re6t-p3gu"
                },
                {
                    "vulnerability": "VCID-5rae-psy2-dba5"
                },
                {
                    "vulnerability": "VCID-75re-n41m-y3et"
                },
                {
                    "vulnerability": "VCID-8ahj-xadv-xbhr"
                },
                {
                    "vulnerability": "VCID-9j2h-q1n5-kbgt"
                },
                {
                    "vulnerability": "VCID-d79s-4kzk-hugy"
                },
                {
                    "vulnerability": "VCID-ftr5-c6nt-gbh4"
                },
                {
                    "vulnerability": "VCID-m3dg-q4eg-wyfb"
                },
                {
                    "vulnerability": "VCID-mrst-4yau-ubce"
                },
                {
                    "vulnerability": "VCID-p8m8-y53c-cubn"
                },
                {
                    "vulnerability": "VCID-vgwd-1z7m-gkh8"
                },
                {
                    "vulnerability": "VCID-wxg4-7yap-3qdx"
                },
                {
                    "vulnerability": "VCID-y9d1-wwne-hba5"
                },
                {
                    "vulnerability": "VCID-yadx-n3tq-rkdb"
                },
                {
                    "vulnerability": "VCID-zqqe-vew2-nbfk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/typo3-src@4.2.5-1%252Blenny9"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/571363?format=api",
            "purl": "pkg:deb/debian/typo3-src@4.3.9%2Bdfsg1-1%2Bsqueeze9",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-133h-9erq-2fhy"
                },
                {
                    "vulnerability": "VCID-4auu-re6t-p3gu"
                },
                {
                    "vulnerability": "VCID-5rae-psy2-dba5"
                },
                {
                    "vulnerability": "VCID-75re-n41m-y3et"
                },
                {
                    "vulnerability": "VCID-8ahj-xadv-xbhr"
                },
                {
                    "vulnerability": "VCID-9j2h-q1n5-kbgt"
                },
                {
                    "vulnerability": "VCID-d79s-4kzk-hugy"
                },
                {
                    "vulnerability": "VCID-ftr5-c6nt-gbh4"
                },
                {
                    "vulnerability": "VCID-m3dg-q4eg-wyfb"
                },
                {
                    "vulnerability": "VCID-mrst-4yau-ubce"
                },
                {
                    "vulnerability": "VCID-p8m8-y53c-cubn"
                },
                {
                    "vulnerability": "VCID-vgwd-1z7m-gkh8"
                },
                {
                    "vulnerability": "VCID-wxg4-7yap-3qdx"
                },
                {
                    "vulnerability": "VCID-y9d1-wwne-hba5"
                },
                {
                    "vulnerability": "VCID-yadx-n3tq-rkdb"
                },
                {
                    "vulnerability": "VCID-zqqe-vew2-nbfk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/typo3-src@4.3.9%252Bdfsg1-1%252Bsqueeze9"
        }
    ],
    "references": [
        {
            "reference_url": "http://lists.opensuse.org/opensuse-updates/2014-06/msg00037.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "8.7",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                },
                {
                    "value": "HIGH",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-06/msg00037.html"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3942",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63438",
                    "published_at": "2026-05-14T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63278",
                    "published_at": "2026-04-13T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63322",
                    "published_at": "2026-04-18T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63301",
                    "published_at": "2026-04-21T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.6332",
                    "published_at": "2026-04-24T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63333",
                    "published_at": "2026-04-26T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63331",
                    "published_at": "2026-04-29T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63299",
                    "published_at": "2026-05-05T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63344",
                    "published_at": "2026-05-07T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63396",
                    "published_at": "2026-05-09T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63357",
                    "published_at": "2026-05-11T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63384",
                    "published_at": "2026-05-12T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.6319",
                    "published_at": "2026-04-01T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63249",
                    "published_at": "2026-04-02T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63279",
                    "published_at": "2026-04-04T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63244",
                    "published_at": "2026-04-07T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63295",
                    "published_at": "2026-04-08T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63313",
                    "published_at": "2026-04-09T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.6333",
                    "published_at": "2026-04-11T12:55:00Z"
                },
                {
                    "value": "0.00442",
                    "scoring_system": "epss",
                    "scoring_elements": "0.63314",
                    "published_at": "2026-04-16T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3942"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3941",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3941"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3942",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3942"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3943",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3943"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3944",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3944"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3945",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3945"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3946",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3946"
        },
        {
            "reference_url": "https://github.com/TYPO3/typo3",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "8.7",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                },
                {
                    "value": "HIGH",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/TYPO3/typo3"
        },
        {
            "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2014-001",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "8.7",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                },
                {
                    "value": "HIGH",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://typo3.org/security/advisory/typo3-core-sa-2014-001"
        },
        {
            "reference_url": "http://www.debian.org/security/2014/dsa-2942",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "8.7",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                },
                {
                    "value": "HIGH",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.debian.org/security/2014/dsa-2942"
        },
        {
            "reference_url": "http://www.openwall.com/lists/oss-security/2014/06/03/2",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "8.7",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                },
                {
                    "value": "HIGH",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/06/03/2"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3942",
            "reference_id": "CVE-2014-3942",
            "reference_type": "",
            "scores": [
                {
                    "value": "8.7",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                },
                {
                    "value": "HIGH",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3942"
        },
        {
            "reference_url": "https://github.com/advisories/GHSA-55g3-fjwm-w2c8",
            "reference_id": "GHSA-55g3-fjwm-w2c8",
            "reference_type": "",
            "scores": [
                {
                    "value": "HIGH",
                    "scoring_system": "cvssv3.1_qr",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/advisories/GHSA-55g3-fjwm-w2c8"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 94,
            "name": "Improper Control of Generation of Code ('Code Injection')",
            "description": "The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment."
        },
        {
            "cwe_id": 937,
            "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."
        },
        {
            "cwe_id": 1035,
            "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."
        }
    ],
    "exploits": [],
    "severity_range_score": "7.0 - 8.9",
    "exploitability": "0.5",
    "weighted_severity": "8.0",
    "risk_score": 4.0,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m3dg-q4eg-wyfb"
}