Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/67487?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/67487?format=api", "vulnerability_id": "VCID-rvbr-nser-sfe7", "summary": "os/exec: Unexpected paths returned from LookPath in os/exec", "aliases": [ { "alias": "CVE-2025-47906" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/475546?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=loongarch64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=loongarch64&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/479389?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=riscv64&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=riscv64&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/959841?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=x86&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=x86&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/959840?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=s390x&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=s390x&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/959838?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=ppc64le&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=ppc64le&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/475543?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=aarch64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=aarch64&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/479388?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=ppc64le&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=ppc64le&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/959835?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=armhf&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=armhf&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/959836?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=armv7&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=armv7&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/959837?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=loongarch64&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/959839?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=riscv64&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=riscv64&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/959842?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=x86_64&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=x86_64&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/475550?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=x86&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=x86&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/479386?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=armv7&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=armv7&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/479385?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=armhf&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=armhf&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/475549?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=s390x&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=s390x&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/475551?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=x86_64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=x86_64&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/475544?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=armhf&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=armhf&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/475548?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/479384?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=aarch64&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=aarch64&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/959834?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=aarch64&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=aarch64&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/479391?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=x86&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=x86&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/479387?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=loongarch64&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=loongarch64&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/479392?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=x86_64&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=x86_64&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/475545?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=armv7&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=armv7&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/479390?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=s390x&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=s390x&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/475547?format=api", "purl": "pkg:apk/alpine/go@1.24.6-r0?arch=ppc64le&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=ppc64le&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/923842?format=api", "purl": "pkg:deb/debian/golang-1.24@1.24.7-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.7-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/994466?format=api", "purl": "pkg:deb/debian/golang-1.24@1.24.9-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.9-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/923835?format=api", "purl": "pkg:deb/debian/golang-1.24@1.24.13-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.13-2%3Fdistro=trixie" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/994465?format=api", "purl": "pkg:deb/debian/golang-1.24@1.24.4-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1aty-87pz-5yb8" }, { "vulnerability": "VCID-254d-pjst-c7hx" }, { "vulnerability": "VCID-3nqb-6mna-jyb4" }, { "vulnerability": "VCID-5n8q-zcds-gyen" }, { "vulnerability": "VCID-5q9b-a7c4-1yht" }, { "vulnerability": "VCID-7n3z-vwk2-3ydr" }, { "vulnerability": "VCID-9ky3-s2vk-cuge" }, { "vulnerability": "VCID-br2f-7ux9-hkhg" }, { "vulnerability": "VCID-bv1f-bee8-cbek" }, { "vulnerability": "VCID-csmt-e61b-tued" }, { "vulnerability": "VCID-dp1t-v58b-43du" }, { "vulnerability": "VCID-dtt9-gmqf-nbaf" }, { "vulnerability": "VCID-eyev-qpgs-hfbx" }, { "vulnerability": "VCID-hay4-q9m3-ekdj" }, { "vulnerability": "VCID-je6z-v5qw-ufew" }, { "vulnerability": "VCID-mvsr-c2yh-mbdq" }, { "vulnerability": "VCID-q9yj-ze4x-qyfr" }, { "vulnerability": "VCID-rvbr-nser-sfe7" }, { "vulnerability": "VCID-sb3w-x3yv-ffft" }, { "vulnerability": "VCID-t2dr-6dz3-7qgt" }, { "vulnerability": "VCID-usyf-s559-pkgx" }, { "vulnerability": "VCID-wchc-as62-1fae" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.4-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/923837?format=api", "purl": "pkg:deb/debian/golang-1.24@1.24.4-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1aty-87pz-5yb8" }, { "vulnerability": "VCID-254d-pjst-c7hx" }, { "vulnerability": "VCID-3nqb-6mna-jyb4" }, { "vulnerability": "VCID-5n8q-zcds-gyen" }, { "vulnerability": "VCID-5q9b-a7c4-1yht" }, { "vulnerability": "VCID-7n3z-vwk2-3ydr" }, { "vulnerability": "VCID-9ky3-s2vk-cuge" }, { "vulnerability": "VCID-br2f-7ux9-hkhg" }, { "vulnerability": "VCID-bv1f-bee8-cbek" }, { "vulnerability": "VCID-csmt-e61b-tued" }, { "vulnerability": "VCID-dp1t-v58b-43du" }, { "vulnerability": "VCID-dtt9-gmqf-nbaf" }, { "vulnerability": "VCID-eyev-qpgs-hfbx" }, { "vulnerability": "VCID-hay4-q9m3-ekdj" }, { "vulnerability": "VCID-je6z-v5qw-ufew" }, { "vulnerability": "VCID-mvsr-c2yh-mbdq" }, { "vulnerability": "VCID-q9yj-ze4x-qyfr" }, { "vulnerability": "VCID-rvbr-nser-sfe7" }, { "vulnerability": "VCID-sb3w-x3yv-ffft" }, { "vulnerability": "VCID-t2dr-6dz3-7qgt" }, { "vulnerability": "VCID-usyf-s559-pkgx" }, { "vulnerability": "VCID-wchc-as62-1fae" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.4-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/88304?format=api", "purl": "pkg:rpm/redhat/golang@1.17.13-8?arch=el9_0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mvsr-c2yh-mbdq" }, { "vulnerability": "VCID-rvbr-nser-sfe7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.17.13-8%3Farch=el9_0" }, { "url": "http://public2.vulnerablecode.io/api/packages/88312?format=api", "purl": "pkg:rpm/redhat/golang@1.19.13-20?arch=el9_2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mvsr-c2yh-mbdq" }, { "vulnerability": "VCID-rvbr-nser-sfe7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.19.13-20%3Farch=el9_2" }, { "url": "http://public2.vulnerablecode.io/api/packages/88298?format=api", "purl": "pkg:rpm/redhat/golang@1.21.13-12?arch=el9_4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mvsr-c2yh-mbdq" }, { "vulnerability": "VCID-rvbr-nser-sfe7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.21.13-12%3Farch=el9_4" }, { "url": "http://public2.vulnerablecode.io/api/packages/88722?format=api", "purl": "pkg:rpm/redhat/golang@1.24.6-1?arch=el10_0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1aty-87pz-5yb8" }, { "vulnerability": "VCID-5n8q-zcds-gyen" }, { "vulnerability": "VCID-rvbr-nser-sfe7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.24.6-1%3Farch=el10_0" }, { "url": "http://public2.vulnerablecode.io/api/packages/88718?format=api", "purl": "pkg:rpm/redhat/golang@1.24.6-1?arch=el9_6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1aty-87pz-5yb8" }, { "vulnerability": "VCID-5n8q-zcds-gyen" }, { "vulnerability": "VCID-rvbr-nser-sfe7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.24.6-1%3Farch=el9_6" }, { "url": "http://public2.vulnerablecode.io/api/packages/88717?format=api", "purl": "pkg:rpm/redhat/go-rpm-macros@3.0.9-12?arch=el9_0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-rvbr-nser-sfe7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/go-rpm-macros@3.0.9-12%3Farch=el9_0" }, { "url": "http://public2.vulnerablecode.io/api/packages/88720?format=api", "purl": "pkg:rpm/redhat/go-rpm-macros@3.2.0-2?arch=el9_2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-rvbr-nser-sfe7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/go-rpm-macros@3.2.0-2%3Farch=el9_2" }, { "url": "http://public2.vulnerablecode.io/api/packages/88723?format=api", "purl": "pkg:rpm/redhat/go-rpm-macros@3.2.0-4?arch=el9_4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-rvbr-nser-sfe7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/go-rpm-macros@3.2.0-4%3Farch=el9_4" }, { "url": "http://public2.vulnerablecode.io/api/packages/88719?format=api", "purl": "pkg:rpm/redhat/go-rpm-macros@3.6.0-11?arch=el9_6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-rvbr-nser-sfe7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/go-rpm-macros@3.6.0-11%3Farch=el9_6" }, { "url": "http://public2.vulnerablecode.io/api/packages/88721?format=api", "purl": "pkg:rpm/redhat/go-rpm-macros@3.6.0-12?arch=el9_7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-rvbr-nser-sfe7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/go-rpm-macros@3.6.0-12%3Farch=el9_7" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47906.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47906.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47906", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.0725", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07872", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.078", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07847", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07802", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07859", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.0788", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07858", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07845", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08643", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08578", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.0872", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08808", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08774", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08801", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.0886", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08687", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08641", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.08997", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09018", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47906" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47906", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47906" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1110947", "reference_id": "1110947", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1110947" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2396546", "reference_id": "2396546", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2396546" }, { "reference_url": "https://go.dev/cl/691775", "reference_id": "691775", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-18T20:42:17Z/" } ], "url": "https://go.dev/cl/691775" }, { "reference_url": "https://go.dev/issue/74466", "reference_id": "74466", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-18T20:42:17Z/" } ], "url": "https://go.dev/issue/74466" }, { "reference_url": "https://pkg.go.dev/vuln/GO-2025-3956", "reference_id": "GO-2025-3956", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-18T20:42:17Z/" } ], "url": "https://pkg.go.dev/vuln/GO-2025-3956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:13935", "reference_id": "RHSA-2025:13935", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:13935" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:13941", "reference_id": "RHSA-2025:13941", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:13941" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:21856", "reference_id": "RHSA-2025:21856", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:21856" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22004", "reference_id": "RHSA-2025:22004", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22004" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22005", "reference_id": "RHSA-2025:22005", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22005" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22181", "reference_id": "RHSA-2025:22181", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22181" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22668", "reference_id": "RHSA-2025:22668", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22668" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22899", "reference_id": "RHSA-2025:22899", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22899" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22935", "reference_id": "RHSA-2025:22935", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22935" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23205", "reference_id": "RHSA-2025:23205", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23205" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23449", "reference_id": "RHSA-2025:23449", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23449" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23733", "reference_id": "RHSA-2025:23733", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23733" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23737", "reference_id": "RHSA-2025:23737", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23737" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23740", "reference_id": "RHSA-2025:23740", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23740" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23741", "reference_id": "RHSA-2025:23741", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23741" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23833", "reference_id": "RHSA-2025:23833", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23833" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23834", "reference_id": "RHSA-2025:23834", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23834" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23851", "reference_id": "RHSA-2025:23851", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23851" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3461", "reference_id": "RHSA-2026:3461", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3461" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3462", "reference_id": "RHSA-2026:3462", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3462" }, { "reference_url": "https://groups.google.com/g/golang-announce/c/x5MKroML2yM", "reference_id": "x5MKroML2yM", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-18T20:42:17Z/" } ], "url": "https://groups.google.com/g/golang-announce/c/x5MKroML2yM" } ], "weaknesses": [ { "cwe_id": 440, "name": "Expected Behavior Violation", "description": "A feature, API, or function does not perform according to its specification." }, { "cwe_id": 115, "name": "Misinterpretation of Input", "description": "The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion." } ], "exploits": [], "severity_range_score": "4.0 - 6.5", "exploitability": "0.5", "weighted_severity": "5.9", "risk_score": 3.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rvbr-nser-sfe7" }