{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/48158?format=json","vulnerability_id":"VCID-1fms-7y9v-dfc5","summary":"Multiple vulnerabilities have been found in Expat, the worst of\n    which may allow execution of arbitrary code.","aliases":[{"alias":"CVE-2013-0340"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/922060?format=json","purl":"pkg:deb/debian/expat@2.4.1-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/expat@2.4.1-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/583458?format=json","purl":"pkg:deb/debian/expat@2.5.0-1%2Bdeb12u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-292c-g8n3-cyfn"},{"vulnerability":"VCID-77y6-jskt-qucb"},{"vulnerability":"VCID-jqe4-44gw-wbhu"},{"vulnerability":"VCID-nktd-7gph-kkb1"},{"vulnerability":"VCID-qmx9-wkj4-67h3"},{"vulnerability":"VCID-u5pr-wheu-h7c6"},{"vulnerability":"VCID-utz3-ytaf-cbht"},{"vulnerability":"VCID-v41j-xj8s-m7ar"},{"vulnerability":"VCID-yw8s-ezc7-6ub8"},{"vulnerability":"VCID-z7ne-wvmz-ykbz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/expat@2.5.0-1%252Bdeb12u2"},{"url":"http://public2.vulnerablecode.io/api/packages/582484?format=json","purl":"pkg:deb/debian/expat@2.5.0-1%2Bdeb12u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-292c-g8n3-cyfn"},{"vulnerability":"VCID-77y6-jskt-qucb"},{"vulnerability":"VCID-jqe4-44gw-wbhu"},{"vulnerability":"VCID-nktd-7gph-kkb1"},{"vulnerability":"VCID-qmx9-wkj4-67h3"},{"vulnerability":"VCID-u5pr-wheu-h7c6"},{"vulnerability":"VCID-utz3-ytaf-cbht"},{"vulnerability":"VCID-v41j-xj8s-m7ar"},{"vulnerability":"VCID-yw8s-ezc7-6ub8"},{"vulnerability":"VCID-z7ne-wvmz-ykbz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/expat@2.5.0-1%252Bdeb12u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582485?format=json","purl":"pkg:deb/debian/expat@2.7.1-2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-292c-g8n3-cyfn"},{"vulnerability":"VCID-77y6-jskt-qucb"},{"vulnerability":"VCID-jqe4-44gw-wbhu"},{"vulnerability":"VCID-nktd-7gph-kkb1"},{"vulnerability":"VCID-utz3-ytaf-cbht"},{"vulnerability":"VCID-v41j-xj8s-m7ar"},{"vulnerability":"VCID-yw8s-ezc7-6ub8"},{"vulnerability":"VCID-z7ne-wvmz-ykbz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/expat@2.7.1-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582486?format=json","purl":"pkg:deb/debian/expat@2.7.5-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-292c-g8n3-cyfn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/expat@2.7.5-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1077426?format=json","purl":"pkg:deb/debian/expat@2.8.0-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-z7ne-wvmz-ykbz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/expat@2.8.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1112517?format=json","purl":"pkg:deb/debian/expat@2.8.0-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/expat@2.8.0-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/77415?format=json","purl":"pkg:ebuild/dev-libs/expat@2.2.0-r1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/expat@2.2.0-r1"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/583457?format=json","purl":"pkg:deb/debian/expat@2.2.10-2%2Bdeb11u5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fms-7y9v-dfc5"},{"vulnerability":"VCID-292c-g8n3-cyfn"},{"vulnerability":"VCID-77y6-jskt-qucb"},{"vulnerability":"VCID-7ndj-4zn8-cqa4"},{"vulnerability":"VCID-d26t-ex9d-x3ev"},{"vulnerability":"VCID-gtcn-kyd2-xqdk"},{"vulnerability":"VCID-jqe4-44gw-wbhu"},{"vulnerability":"VCID-k2kp-fv3q-vyh2"},{"vulnerability":"VCID-nguf-68jf-ryaz"},{"vulnerability":"VCID-nktd-7gph-kkb1"},{"vulnerability":"VCID-nw3z-nwyg-87e5"},{"vulnerability":"VCID-qmx9-wkj4-67h3"},{"vulnerability":"VCID-u5pr-wheu-h7c6"},{"vulnerability":"VCID-utz3-ytaf-cbht"},{"vulnerability":"VCID-v41j-xj8s-m7ar"},{"vulnerability":"VCID-yw8s-ezc7-6ub8"},{"vulnerability":"VCID-z7ne-wvmz-ykbz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/expat@2.2.10-2%252Bdeb11u5"},{"url":"http://public2.vulnerablecode.io/api/packages/582483?format=json","purl":"pkg:deb/debian/expat@2.2.10-2%2Bdeb11u5?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fms-7y9v-dfc5"},{"vulnerability":"VCID-292c-g8n3-cyfn"},{"vulnerability":"VCID-77y6-jskt-qucb"},{"vulnerability":"VCID-jqe4-44gw-wbhu"},{"vulnerability":"VCID-nguf-68jf-ryaz"},{"vulnerability":"VCID-nktd-7gph-kkb1"},{"vulnerability":"VCID-qmx9-wkj4-67h3"},{"vulnerability":"VCID-u5pr-wheu-h7c6"},{"vulnerability":"VCID-utz3-ytaf-cbht"},{"vulnerability":"VCID-v41j-xj8s-m7ar"},{"vulnerability":"VCID-yw8s-ezc7-6ub8"},{"vulnerability":"VCID-z7ne-wvmz-ykbz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/expat@2.2.10-2%252Bdeb11u5%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/88806?format=json","purl":"pkg:rpm/redhat/expat@2.2.10-1?arch=el8_2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fms-7y9v-dfc5"},{"vulnerability":"VCID-28yc-wkq6-c7hb"},{"vulnerability":"VCID-4c32-p11r-zud5"},{"vulnerability":"VCID-77y6-jskt-qucb"},{"vulnerability":"VCID-7ndj-4zn8-cqa4"},{"vulnerability":"VCID-9ern-6htc-p7c4"},{"vulnerability":"VCID-dy3x-vd1y-dbbn"},{"vulnerability":"VCID-gf3f-k2be-67e2"},{"vulnerability":"VCID-kp8z-47q5-n7es"},{"vulnerability":"VCID-naf7-p1jf-z3ds"},{"vulnerability":"VCID-nguf-68jf-ryaz"},{"vulnerability":"VCID-nmh4-zpeh-4bcr"},{"vulnerability":"VCID-rjbn-1a88-87cj"},{"vulnerability":"VCID-th9f-gg4v-bbbe"},{"vulnerability":"VCID-tt7m-c9zc-1kem"},{"vulnerability":"VCID-u2yw-sybk-uug8"},{"vulnerability":"VCID-uw5p-szmd-8qcm"},{"vulnerability":"VCID-x8gp-vvxg-13cw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/expat@2.2.10-1%3Farch=el8_2"},{"url":"http://public2.vulnerablecode.io/api/packages/88803?format=json","purl":"pkg:rpm/redhat/expat@2.2.10-1?arch=el8_6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fms-7y9v-dfc5"},{"vulnerability":"VCID-77y6-jskt-qucb"},{"vulnerability":"VCID-nguf-68jf-ryaz"},{"vulnerability":"VCID-tt7m-c9zc-1kem"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/expat@2.2.10-1%3Farch=el8_6"},{"url":"http://public2.vulnerablecode.io/api/packages/88802?format=json","purl":"pkg:rpm/redhat/expat@2.2.10-1?arch=el8_4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fms-7y9v-dfc5"},{"vulnerability":"VCID-28yc-wkq6-c7hb"},{"vulnerability":"VCID-4c32-p11r-zud5"},{"vulnerability":"VCID-77y6-jskt-qucb"},{"vulnerability":"VCID-7ndj-4zn8-cqa4"},{"vulnerability":"VCID-9ern-6htc-p7c4"},{"vulnerability":"VCID-dy3x-vd1y-dbbn"},{"vulnerability":"VCID-gf3f-k2be-67e2"},{"vulnerability":"VCID-kp8z-47q5-n7es"},{"vulnerability":"VCID-nguf-68jf-ryaz"},{"vulnerability":"VCID-rjbn-1a88-87cj"},{"vulnerability":"VCID-th9f-gg4v-bbbe"},{"vulnerability":"VCID-tt7m-c9zc-1kem"},{"vulnerability":"VCID-u2yw-sybk-uug8"},{"vulnerability":"VCID-uw5p-szmd-8qcm"},{"vulnerability":"VCID-x8gp-vvxg-13cw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/expat@2.2.10-1%3Farch=el8_4"},{"url":"http://public2.vulnerablecode.io/api/packages/88804?format=json","purl":"pkg:rpm/redhat/expat@2.2.10-1?arch=el8_8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fms-7y9v-dfc5"},{"vulnerability":"VCID-77y6-jskt-qucb"},{"vulnerability":"VCID-nguf-68jf-ryaz"},{"vulnerability":"VCID-tt7m-c9zc-1kem"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/expat@2.2.10-1%3Farch=el8_8"},{"url":"http://public2.vulnerablecode.io/api/packages/88797?format=json","purl":"pkg:rpm/redhat/expat@2.2.10-12.el9_0?arch=4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fms-7y9v-dfc5"},{"vulnerability":"VCID-77y6-jskt-qucb"},{"vulnerability":"VCID-7ndj-4zn8-cqa4"},{"vulnerability":"VCID-nguf-68jf-ryaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/expat@2.2.10-12.el9_0%3Farch=4"},{"url":"http://public2.vulnerablecode.io/api/packages/124716?format=json","purl":"pkg:rpm/redhat/expat@2.4.9-1?arch=el9_1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fms-7y9v-dfc5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/expat@2.4.9-1%3Farch=el9_1"},{"url":"http://public2.vulnerablecode.io/api/packages/88808?format=json","purl":"pkg:rpm/redhat/expat@2.5.0-1?arch=el8_10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fms-7y9v-dfc5"},{"vulnerability":"VCID-77y6-jskt-qucb"},{"vulnerability":"VCID-tt7m-c9zc-1kem"},{"vulnerability":"VCID-u5pr-wheu-h7c6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/expat@2.5.0-1%3Farch=el8_10"}],"references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0340.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0340.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2013-0340","reference_id":"","reference_type":"","scores":[{"value":"0.00056","scoring_system":"epss","scoring_elements":"0.17249","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.1867","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18724","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18439","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18519","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18572","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18575","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18477","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.1842","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18433","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18455","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18357","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18341","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18298","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18158","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18528","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00063","scoring_system":"epss","scoring_elements":"0.19622","published_at":"2026-05-09T12:55:00Z"},{"value":"0.00063","scoring_system":"epss","scoring_elements":"0.19584","published_at":"2026-05-11T12:55:00Z"},{"value":"0.00063","scoring_system":"epss","scoring_elements":"0.19612","published_at":"2026-05-12T12:55:00Z"},{"value":"0.00063","scoring_system":"epss","scoring_elements":"0.19706","published_at":"2026-05-14T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2013-0340"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0340","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0340"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1000109","reference_id":"1000109","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1000109"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001864","reference_id":"1001864","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001864"},{"reference_url":"https://security.gentoo.org/glsa/201701-21","reference_id":"GLSA-201701-21","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-21"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:21776","reference_id":"RHSA-2025:21776","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:21776"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:22035","reference_id":"RHSA-2025:22035","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:22035"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:22607","reference_id":"RHSA-2025:22607","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:22607"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:22785","reference_id":"RHSA-2025:22785","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:22785"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:22842","reference_id":"RHSA-2025:22842","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:22842"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:22871","reference_id":"RHSA-2025:22871","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:22871"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":"0.5","weighted_severity":"0.0","risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1fms-7y9v-dfc5"}