{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41918?format=json","vulnerability_id":"VCID-mxsc-9rgx-syb5","summary":"Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.","aliases":[{"alias":"CVE-2024-36138"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/147050?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=aarch64&distroversion=v3.20&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=aarch64&distroversion=v3.20&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/147051?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=armhf&distroversion=v3.20&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=armhf&distroversion=v3.20&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/147052?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=armv7&distroversion=v3.20&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=armv7&distroversion=v3.20&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/147053?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=ppc64le&distroversion=v3.20&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=ppc64le&distroversion=v3.20&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/147054?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=riscv64&distroversion=v3.20&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=riscv64&distroversion=v3.20&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/147055?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=s390x&distroversion=v3.20&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=s390x&distroversion=v3.20&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/147056?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=x86&distroversion=v3.20&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=x86&distroversion=v3.20&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/147057?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=x86_64&distroversion=v3.20&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=x86_64&distroversion=v3.20&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/159428?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=aarch64&distroversion=edge&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=aarch64&distroversion=edge&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/159429?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=armhf&distroversion=edge&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=armhf&distroversion=edge&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/159430?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=armv7&distroversion=edge&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=armv7&distroversion=edge&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/159431?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=loongarch64&distroversion=edge&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=loongarch64&distroversion=edge&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/159432?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=ppc64le&distroversion=edge&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=ppc64le&distroversion=edge&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/159433?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=riscv64&distroversion=edge&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=riscv64&distroversion=edge&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/159434?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=s390x&distroversion=edge&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=s390x&distroversion=edge&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/159435?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=x86&distroversion=edge&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=x86&distroversion=edge&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/159436?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=x86_64&distroversion=edge&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=x86_64&distroversion=edge&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/165283?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=aarch64&distroversion=v3.24&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=aarch64&distroversion=v3.24&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/165284?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=armhf&distroversion=v3.24&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=armhf&distroversion=v3.24&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/165285?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=armv7&distroversion=v3.24&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=armv7&distroversion=v3.24&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/165286?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=loongarch64&distroversion=v3.24&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=loongarch64&distroversion=v3.24&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/165287?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=ppc64le&distroversion=v3.24&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=ppc64le&distroversion=v3.24&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/165288?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=riscv64&distroversion=v3.24&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=riscv64&distroversion=v3.24&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/165289?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=s390x&distroversion=v3.24&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=s390x&distroversion=v3.24&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/165290?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=x86&distroversion=v3.24&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=x86&distroversion=v3.24&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/165291?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=x86_64&distroversion=v3.24&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=x86_64&distroversion=v3.24&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/166345?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=aarch64&distroversion=v3.19&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=aarch64&distroversion=v3.19&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/166346?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=armhf&distroversion=v3.19&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=armhf&distroversion=v3.19&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/166347?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=armv7&distroversion=v3.19&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=armv7&distroversion=v3.19&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/166348?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=ppc64le&distroversion=v3.19&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=ppc64le&distroversion=v3.19&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/166349?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=s390x&distroversion=v3.19&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=s390x&distroversion=v3.19&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/166350?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=x86&distroversion=v3.19&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=x86&distroversion=v3.19&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/166351?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=x86_64&distroversion=v3.19&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=x86_64&distroversion=v3.19&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/187488?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=aarch64&distroversion=v3.23&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=aarch64&distroversion=v3.23&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/187489?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=armhf&distroversion=v3.23&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=armhf&distroversion=v3.23&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/187490?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=armv7&distroversion=v3.23&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=armv7&distroversion=v3.23&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/187491?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=loongarch64&distroversion=v3.23&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=loongarch64&distroversion=v3.23&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/187492?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=ppc64le&distroversion=v3.23&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=ppc64le&distroversion=v3.23&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/187493?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=riscv64&distroversion=v3.23&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=riscv64&distroversion=v3.23&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/187494?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=s390x&distroversion=v3.23&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=s390x&distroversion=v3.23&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/187495?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=x86&distroversion=v3.23&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=x86&distroversion=v3.23&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/187496?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=x86_64&distroversion=v3.23&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=x86_64&distroversion=v3.23&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/301461?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=aarch64&distroversion=v3.22&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=aarch64&distroversion=v3.22&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/301462?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=armhf&distroversion=v3.22&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=armhf&distroversion=v3.22&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/301463?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=armv7&distroversion=v3.22&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=armv7&distroversion=v3.22&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/301464?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=loongarch64&distroversion=v3.22&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=loongarch64&distroversion=v3.22&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/301465?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=ppc64le&distroversion=v3.22&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=ppc64le&distroversion=v3.22&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/301466?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=riscv64&distroversion=v3.22&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=riscv64&distroversion=v3.22&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/301467?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=s390x&distroversion=v3.22&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=s390x&distroversion=v3.22&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/301468?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=x86&distroversion=v3.22&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=x86&distroversion=v3.22&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/301469?format=json","purl":"pkg:apk/alpine/nodejs@0?arch=x86_64&distroversion=v3.22&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@0%3Farch=x86_64&distroversion=v3.22&reponame=main"},{"url":"http://public2.vulnerablecode.io/api/packages/96962?format=json","purl":"pkg:deb/debian/nodejs@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/96955?format=json","purl":"pkg:deb/debian/nodejs@12.22.12~dfsg-1~deb11u4?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wun-dzth-87ce"},{"vulnerability":"VCID-4zcv-hzse-rbgw"},{"vulnerability":"VCID-7cv1-zn4s-c7ha"},{"vulnerability":"VCID-pzkj-zw7d-nbe2"},{"vulnerability":"VCID-zwf3-28nc-xffq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@12.22.12~dfsg-1~deb11u4%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/96953?format=json","purl":"pkg:deb/debian/nodejs@18.20.4%2Bdfsg-1~deb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-pzkj-zw7d-nbe2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@18.20.4%252Bdfsg-1~deb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/96958?format=json","purl":"pkg:deb/debian/nodejs@20.19.2%2Bdfsg-1%2Bdeb13u2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@20.19.2%252Bdfsg-1%252Bdeb13u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/96956?format=json","purl":"pkg:deb/debian/nodejs@24.15.0%2Bdfsg%2B~cs24.12.2-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@24.15.0%252Bdfsg%252B~cs24.12.2-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/96957?format=json","purl":"pkg:deb/debian/nodejs@24.16.0%2Bdfsg%2B~cs24.13.1-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@24.16.0%252Bdfsg%252B~cs24.13.1-2%3Fdistro=trixie"}],"affected_packages":[],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-36138","reference_id":"","reference_type":"","scores":[{"value":"0.00261","scoring_system":"epss","scoring_elements":"0.49734","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00261","scoring_system":"epss","scoring_elements":"0.4987","published_at":"2026-06-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-36138"},{"reference_url":"https://nodejs.org/en/blog/vulnerability/july-2024-security-releases","reference_id":"july-2024-security-releases","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-09T17:53:28Z/"}],"url":"https://nodejs.org/en/blog/vulnerability/july-2024-security-releases"}],"weaknesses":[],"exploits":[],"severity_range_score":"8.1 - 8.1","exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mxsc-9rgx-syb5"}