{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/4733?format=json","vulnerability_id":"VCID-vm4b-26sq-tfev","summary":"The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.","aliases":[{"alias":"CVE-2009-3548"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1447?format=json","purl":"pkg:apache/tomcat@5.5.29","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7kjm-p97s-zuh8"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-tfn5-6ckq-wyce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.29"},{"url":"http://public2.vulnerablecode.io/api/packages/1410?format=json","purl":"pkg:apache/tomcat@6.0.24","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.24"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1433?format=json","purl":"pkg:apache/tomcat@5.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18j8-kwdv-dyak"},{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-241m-q6vd-kudk"},{"vulnerability":"VCID-27q8-96un-9fbk"},{"vulnerability":"VCID-2jnv-segx-zkfd"},{"vulnerability":"VCID-4rcx-xfn5-7kdb"},{"vulnerability":"VCID-6epr-2hbd-skcz"},{"vulnerability":"VCID-6p3e-4u8s-17ep"},{"vulnerability":"VCID-7969-7a8h-zyhh"},{"vulnerability":"VCID-7kjm-p97s-zuh8"},{"vulnerability":"VCID-86ur-vudp-4yc2"},{"vulnerability":"VCID-87p8-zvvf-y7dm"},{"vulnerability":"VCID-88v7-kc2y-bfd7"},{"vulnerability":"VCID-a9cu-fxqw-xkdg"},{"vulnerability":"VCID-acmu-9eqb-fya5"},{"vulnerability":"VCID-bhq7-d545-27bj"},{"vulnerability":"VCID-bung-pa58-ayfv"},{"vulnerability":"VCID-d9ys-kxh6-nkgr"},{"vulnerability":"VCID-dcrp-rae1-zfcm"},{"vulnerability":"VCID-dhun-hj5q-dfch"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-fvvt-kufu-k3a6"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-hhk9-cr54-8fgc"},{"vulnerability":"VCID-mctd-9zgv-5qgp"},{"vulnerability":"VCID-mnf8-t3ew-4fgb"},{"vulnerability":"VCID-n76n-ywja-rbhh"},{"vulnerability":"VCID-peya-mr7j-vugf"},{"vulnerability":"VCID-q7jp-hn4a-4kec"},{"vulnerability":"VCID-qdck-q54n-rkcv"},{"vulnerability":"VCID-quwu-ep21-cyew"},{"vulnerability":"VCID-qxkf-4ddv-j3b7"},{"vulnerability":"VCID-r84b-7ay9-ekcm"},{"vulnerability":"VCID-skar-qk57-qkdv"},{"vulnerability":"VCID-su1y-2bxh-9qe2"},{"vulnerability":"VCID-tcju-3rvu-wkht"},{"vulnerability":"VCID-tfn5-6ckq-wyce"},{"vulnerability":"VCID-v94p-bxm3-akfd"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1451?format=json","purl":"pkg:apache/tomcat@5.5.28","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.28"},{"url":"http://public2.vulnerablecode.io/api/packages/1361?format=json","purl":"pkg:apache/tomcat@6.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18q4-zark-s7a7"},{"vulnerability":"VCID-1k8f-vsg1-k3d6"},{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-241m-q6vd-kudk"},{"vulnerability":"VCID-27q8-96un-9fbk"},{"vulnerability":"VCID-3cr9-g81m-4ugy"},{"vulnerability":"VCID-3n4t-bvb1-5qer"},{"vulnerability":"VCID-3r3s-q21j-c3au"},{"vulnerability":"VCID-4mkw-7haq-pkgn"},{"vulnerability":"VCID-4rcx-xfn5-7kdb"},{"vulnerability":"VCID-68fk-4g86-ekbp"},{"vulnerability":"VCID-6epr-2hbd-skcz"},{"vulnerability":"VCID-6p3e-4u8s-17ep"},{"vulnerability":"VCID-7969-7a8h-zyhh"},{"vulnerability":"VCID-7cpu-h5fr-8ffd"},{"vulnerability":"VCID-7ej8-5f77-cybb"},{"vulnerability":"VCID-7kjm-p97s-zuh8"},{"vulnerability":"VCID-7pd9-1r19-73fe"},{"vulnerability":"VCID-87p8-zvvf-y7dm"},{"vulnerability":"VCID-88v7-kc2y-bfd7"},{"vulnerability":"VCID-95d1-arxd-hkd1"},{"vulnerability":"VCID-a1by-zvtm-akdc"},{"vulnerability":"VCID-a9cu-fxqw-xkdg"},{"vulnerability":"VCID-acmu-9eqb-fya5"},{"vulnerability":"VCID-bung-pa58-ayfv"},{"vulnerability":"VCID-d9ys-kxh6-nkgr"},{"vulnerability":"VCID-dcrp-rae1-zfcm"},{"vulnerability":"VCID-dhun-hj5q-dfch"},{"vulnerability":"VCID-egup-27ub-6uaf"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-fpuc-fe6m-47c6"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-h9ds-trhx-m7aj"},{"vulnerability":"VCID-hhk9-cr54-8fgc"},{"vulnerability":"VCID-hhkg-mfp5-2kax"},{"vulnerability":"VCID-jf7u-dvpd-b7f4"},{"vulnerability":"VCID-kagr-74d9-kyhx"},{"vulnerability":"VCID-kgd1-bzst-muh7"},{"vulnerability":"VCID-kzzv-rhya-j7dd"},{"vulnerability":"VCID-m1zd-uytj-3bej"},{"vulnerability":"VCID-mctd-9zgv-5qgp"},{"vulnerability":"VCID-mnf8-t3ew-4fgb"},{"vulnerability":"VCID-mwk8-b5c9-kbb9"},{"vulnerability":"VCID-n76n-ywja-rbhh"},{"vulnerability":"VCID-p4dn-y54m-8fd1"},{"vulnerability":"VCID-p6ch-pc73-b3ck"},{"vulnerability":"VCID-peya-mr7j-vugf"},{"vulnerability":"VCID-qdck-q54n-rkcv"},{"vulnerability":"VCID-quwu-ep21-cyew"},{"vulnerability":"VCID-qxkf-4ddv-j3b7"},{"vulnerability":"VCID-r84b-7ay9-ekcm"},{"vulnerability":"VCID-su1y-2bxh-9qe2"},{"vulnerability":"VCID-tcbc-3kgt-muam"},{"vulnerability":"VCID-tcju-3rvu-wkht"},{"vulnerability":"VCID-tfn5-6ckq-wyce"},{"vulnerability":"VCID-tfrs-d458-tfaq"},{"vulnerability":"VCID-twh8-87va-juf9"},{"vulnerability":"VCID-v94p-bxm3-akfd"},{"vulnerability":"VCID-vd1s-m27a-8ucc"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-w82a-7kk2-p3f1"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-xf8r-kqxb-7qdy"},{"vulnerability":"VCID-ygvw-69am-s7ae"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1409?format=json","purl":"pkg:apache/tomcat@6.0.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.20"},{"url":"http://public2.vulnerablecode.io/api/packages/1436?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@5.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-12du-1vyt-bkgx"},{"vulnerability":"VCID-18j8-kwdv-dyak"},{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-1v6c-f56v-hqh1"},{"vulnerability":"VCID-241m-q6vd-kudk"},{"vulnerability":"VCID-27q8-96un-9fbk"},{"vulnerability":"VCID-2jnv-segx-zkfd"},{"vulnerability":"VCID-4rcx-xfn5-7kdb"},{"vulnerability":"VCID-6epr-2hbd-skcz"},{"vulnerability":"VCID-6p3e-4u8s-17ep"},{"vulnerability":"VCID-7969-7a8h-zyhh"},{"vulnerability":"VCID-7kjm-p97s-zuh8"},{"vulnerability":"VCID-86ur-vudp-4yc2"},{"vulnerability":"VCID-87p8-zvvf-y7dm"},{"vulnerability":"VCID-88v7-kc2y-bfd7"},{"vulnerability":"VCID-8ebv-6941-jqdy"},{"vulnerability":"VCID-a9cu-fxqw-xkdg"},{"vulnerability":"VCID-acmu-9eqb-fya5"},{"vulnerability":"VCID-bhq7-d545-27bj"},{"vulnerability":"VCID-bung-pa58-ayfv"},{"vulnerability":"VCID-d9ys-kxh6-nkgr"},{"vulnerability":"VCID-dcrp-rae1-zfcm"},{"vulnerability":"VCID-dhun-hj5q-dfch"},{"vulnerability":"VCID-egye-da2v-4ybh"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-fvvt-kufu-k3a6"},{"vulnerability":"VCID-g7eg-s99s-xqe7"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-hhk9-cr54-8fgc"},{"vulnerability":"VCID-mctd-9zgv-5qgp"},{"vulnerability":"VCID-mnf8-t3ew-4fgb"},{"vulnerability":"VCID-n76n-ywja-rbhh"},{"vulnerability":"VCID-peya-mr7j-vugf"},{"vulnerability":"VCID-q7jp-hn4a-4kec"},{"vulnerability":"VCID-qdck-q54n-rkcv"},{"vulnerability":"VCID-quwu-ep21-cyew"},{"vulnerability":"VCID-qxkf-4ddv-j3b7"},{"vulnerability":"VCID-r5rc-rdd9-bfbk"},{"vulnerability":"VCID-r84b-7ay9-ekcm"},{"vulnerability":"VCID-rrdj-ssn7-zfdj"},{"vulnerability":"VCID-rwvj-tq6x-2ubs"},{"vulnerability":"VCID-skar-qk57-qkdv"},{"vulnerability":"VCID-su1y-2bxh-9qe2"},{"vulnerability":"VCID-tcju-3rvu-wkht"},{"vulnerability":"VCID-tfn5-6ckq-wyce"},{"vulnerability":"VCID-v94p-bxm3-akfd"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-zbbr-wded-9ffj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1452?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@5.5.28","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.28"},{"url":"http://public2.vulnerablecode.io/api/packages/1364?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@6.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-12du-1vyt-bkgx"},{"vulnerability":"VCID-18q4-zark-s7a7"},{"vulnerability":"VCID-1k8f-vsg1-k3d6"},{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-1v6c-f56v-hqh1"},{"vulnerability":"VCID-241m-q6vd-kudk"},{"vulnerability":"VCID-27q8-96un-9fbk"},{"vulnerability":"VCID-3cr9-g81m-4ugy"},{"vulnerability":"VCID-3n4t-bvb1-5qer"},{"vulnerability":"VCID-3r3s-q21j-c3au"},{"vulnerability":"VCID-4mkw-7haq-pkgn"},{"vulnerability":"VCID-4rcx-xfn5-7kdb"},{"vulnerability":"VCID-68fk-4g86-ekbp"},{"vulnerability":"VCID-6epr-2hbd-skcz"},{"vulnerability":"VCID-6p3e-4u8s-17ep"},{"vulnerability":"VCID-7969-7a8h-zyhh"},{"vulnerability":"VCID-7cpu-h5fr-8ffd"},{"vulnerability":"VCID-7ej8-5f77-cybb"},{"vulnerability":"VCID-7kjm-p97s-zuh8"},{"vulnerability":"VCID-7pd9-1r19-73fe"},{"vulnerability":"VCID-87p8-zvvf-y7dm"},{"vulnerability":"VCID-88v7-kc2y-bfd7"},{"vulnerability":"VCID-8ebv-6941-jqdy"},{"vulnerability":"VCID-95d1-arxd-hkd1"},{"vulnerability":"VCID-a1by-zvtm-akdc"},{"vulnerability":"VCID-a9cu-fxqw-xkdg"},{"vulnerability":"VCID-acmu-9eqb-fya5"},{"vulnerability":"VCID-bung-pa58-ayfv"},{"vulnerability":"VCID-d9ys-kxh6-nkgr"},{"vulnerability":"VCID-dcrp-rae1-zfcm"},{"vulnerability":"VCID-dhun-hj5q-dfch"},{"vulnerability":"VCID-egup-27ub-6uaf"},{"vulnerability":"VCID-egye-da2v-4ybh"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-fpuc-fe6m-47c6"},{"vulnerability":"VCID-g7eg-s99s-xqe7"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-h9ds-trhx-m7aj"},{"vulnerability":"VCID-hhk9-cr54-8fgc"},{"vulnerability":"VCID-hhkg-mfp5-2kax"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-jf7u-dvpd-b7f4"},{"vulnerability":"VCID-jtg7-217a-qqhk"},{"vulnerability":"VCID-kagr-74d9-kyhx"},{"vulnerability":"VCID-kgd1-bzst-muh7"},{"vulnerability":"VCID-kzzv-rhya-j7dd"},{"vulnerability":"VCID-m1zd-uytj-3bej"},{"vulnerability":"VCID-mctd-9zgv-5qgp"},{"vulnerability":"VCID-mnf8-t3ew-4fgb"},{"vulnerability":"VCID-mwk8-b5c9-kbb9"},{"vulnerability":"VCID-n76n-ywja-rbhh"},{"vulnerability":"VCID-p4dn-y54m-8fd1"},{"vulnerability":"VCID-p6ch-pc73-b3ck"},{"vulnerability":"VCID-peya-mr7j-vugf"},{"vulnerability":"VCID-qdck-q54n-rkcv"},{"vulnerability":"VCID-quwu-ep21-cyew"},{"vulnerability":"VCID-qxkf-4ddv-j3b7"},{"vulnerability":"VCID-r5rc-rdd9-bfbk"},{"vulnerability":"VCID-r84b-7ay9-ekcm"},{"vulnerability":"VCID-rrdj-ssn7-zfdj"},{"vulnerability":"VCID-rwvj-tq6x-2ubs"},{"vulnerability":"VCID-su1y-2bxh-9qe2"},{"vulnerability":"VCID-t9y6-suc2-2kcg"},{"vulnerability":"VCID-ta1m-dh8x-nubc"},{"vulnerability":"VCID-tcbc-3kgt-muam"},{"vulnerability":"VCID-tcju-3rvu-wkht"},{"vulnerability":"VCID-tfn5-6ckq-wyce"},{"vulnerability":"VCID-tfrs-d458-tfaq"},{"vulnerability":"VCID-twh8-87va-juf9"},{"vulnerability":"VCID-v94p-bxm3-akfd"},{"vulnerability":"VCID-vd1s-m27a-8ucc"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-w82a-7kk2-p3f1"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-xf8r-kqxb-7qdy"},{"vulnerability":"VCID-ygvw-69am-s7ae"},{"vulnerability":"VCID-zbbr-wded-9ffj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1411?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@6.0.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.20"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2009-3548","reference_id":"","reference_type":"","scores":[{"value":"0.86884","scoring_system":"epss","scoring_elements":"0.99431","published_at":"2026-04-13T12:55:00Z"},{"value":"0.86884","scoring_system":"epss","scoring_elements":"0.99425","published_at":"2026-04-01T12:55:00Z"},{"value":"0.86884","scoring_system":"epss","scoring_elements":"0.99424","published_at":"2026-04-02T12:55:00Z"},{"value":"0.86884","scoring_system":"epss","scoring_elements":"0.99426","published_at":"2026-04-07T12:55:00Z"},{"value":"0.86884","scoring_system":"epss","scoring_elements":"0.99427","published_at":"2026-04-08T12:55:00Z"},{"value":"0.86884","scoring_system":"epss","scoring_elements":"0.99428","published_at":"2026-04-09T12:55:00Z"},{"value":"0.86884","scoring_system":"epss","scoring_elements":"0.9943","published_at":"2026-04-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2009-3548"},{"reference_url":"https://svn.apache.org/viewvc?view=rev&rev=881771","reference_id":"","reference_type":"","scores":[],"url":"https://svn.apache.org/viewvc?view=rev&rev=881771"},{"reference_url":"https://svn.apache.org/viewvc?view=rev&rev=919006","reference_id":"","reference_type":"","scores":[],"url":"https://svn.apache.org/viewvc?view=rev&rev=919006"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3548","reference_id":"CVE-2009-3548","reference_type":"","scores":[{"value":"Low","scoring_system":"apache_tomcat","scoring_elements":""}],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3548"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/31433.rb","reference_id":"CVE-2009-3548;OSVDB-60176","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/31433.rb"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/16317.rb","reference_id":"CVE-2010-4094;CVE-2010-0557;CVE-2009-4189;CVE-2009-4188;CVE-2009-3843;CVE-2009-3548;OSVDB-60670;OSVDB-60317;OSVDB-60176","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/16317.rb"},{"reference_url":"http://www.zerodayinitiative.com/advisories/ZDI-10-214/","reference_id":"CVE-2010-4094;CVE-2010-0557;CVE-2009-4189;CVE-2009-4188;CVE-2009-3843;CVE-2009-3548;OSVDB-60670;OSVDB-60317;OSVDB-60176","reference_type":"exploit","scores":[],"url":"http://www.zerodayinitiative.com/advisories/ZDI-10-214/"}],"weaknesses":[],"exploits":[{"date_added":"2014-02-05","description":"Apache Tomcat Manager - Application Upload (Authenticated) Code Execution (Metasploit)","required_action":null,"due_date":null,"notes":null,"known_ransomware_campaign_use":true,"source_date_published":"2014-02-05","exploit_type":"remote","platform":"multiple","source_date_updated":"2014-02-05","data_source":"Exploit-DB","source_url":""},{"date_added":null,"description":"This module can be used to execute a payload on Apache Tomcat servers that\n          have an exposed \"manager\" application. The payload is uploaded as a WAR archive\n          containing a jsp application using a POST request against the /manager/html/upload\n          component.\n\n          NOTE: The compatible payload sets vary based on the selected target. For\n          example, you must select the Windows target to use native Windows payloads.","required_action":null,"due_date":null,"notes":"Reliability:\n  - unknown-reliability\nStability:\n  - unknown-stability\nSideEffects:\n  - unknown-side-effects\n","known_ransomware_campaign_use":false,"source_date_published":"2009-11-09","exploit_type":null,"platform":"Java,Linux,Windows","source_date_updated":null,"data_source":"Metasploit","source_url":"https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/multi/http/tomcat_mgr_upload.rb"}],"severity_range_score":"0.1 - 3","exploitability":"2.0","weighted_severity":"2.7","risk_score":5.4,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vm4b-26sq-tfev"}