Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/69448?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/69448?format=api",
    "vulnerability_id": "VCID-jsz8-cdt5-27f6",
    "summary": "crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509",
    "aliases": [
        {
            "alias": "CVE-2025-22874"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/373181?format=api",
            "purl": "pkg:alpm/archlinux/go@1.24.4-1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/go@1.24.4-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/468344?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=aarch64&distroversion=edge&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=aarch64&distroversion=edge&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/425833?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=aarch64&distroversion=v3.23&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=aarch64&distroversion=v3.23&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/425841?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=x86_64&distroversion=v3.23&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=x86_64&distroversion=v3.23&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/425835?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=armv7&distroversion=v3.23&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=armv7&distroversion=v3.23&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/425837?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=ppc64le&distroversion=v3.23&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=ppc64le&distroversion=v3.23&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/464403?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=s390x&distroversion=v3.22&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=s390x&distroversion=v3.22&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/468346?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=armv7&distroversion=edge&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=armv7&distroversion=edge&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/464397?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=aarch64&distroversion=v3.22&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=aarch64&distroversion=v3.22&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/464398?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=armhf&distroversion=v3.22&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=armhf&distroversion=v3.22&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/468352?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=x86_64&distroversion=edge&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=x86_64&distroversion=edge&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/468347?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=loongarch64&distroversion=edge&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=loongarch64&distroversion=edge&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/425839?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=s390x&distroversion=v3.23&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=s390x&distroversion=v3.23&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/425836?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=loongarch64&distroversion=v3.23&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/464405?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=x86_64&distroversion=v3.22&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=x86_64&distroversion=v3.22&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/468348?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=ppc64le&distroversion=edge&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=ppc64le&distroversion=edge&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/425834?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=armhf&distroversion=v3.23&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=armhf&distroversion=v3.23&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/464399?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=armv7&distroversion=v3.22&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=armv7&distroversion=v3.22&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/425840?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=x86&distroversion=v3.23&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=x86&distroversion=v3.23&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/425838?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=riscv64&distroversion=v3.23&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=riscv64&distroversion=v3.23&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/468345?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=armhf&distroversion=edge&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=armhf&distroversion=edge&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/468350?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=s390x&distroversion=edge&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=s390x&distroversion=edge&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/464401?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=ppc64le&distroversion=v3.22&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=ppc64le&distroversion=v3.22&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/464400?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=loongarch64&distroversion=v3.22&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=loongarch64&distroversion=v3.22&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/464404?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=x86&distroversion=v3.22&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=x86&distroversion=v3.22&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/468351?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=x86&distroversion=edge&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=x86&distroversion=edge&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/464402?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=riscv64&distroversion=v3.22&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=riscv64&distroversion=v3.22&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/468349?format=api",
            "purl": "pkg:apk/alpine/go@1.24.4-r0?arch=riscv64&distroversion=edge&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.4-r0%3Farch=riscv64&distroversion=edge&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/923811?format=api",
            "purl": "pkg:deb/debian/golang-1.15@0?distro=bullseye",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.15@0%3Fdistro=bullseye"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/923810?format=api",
            "purl": "pkg:deb/debian/golang-1.15@1.15.15-1~deb11u4?distro=bullseye",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.15@1.15.15-1~deb11u4%3Fdistro=bullseye"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/923834?format=api",
            "purl": "pkg:deb/debian/golang-1.19@0?distro=bookworm",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.19@0%3Fdistro=bookworm"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/923825?format=api",
            "purl": "pkg:deb/debian/golang-1.19@1.19.8-2?distro=bookworm",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.19@1.19.8-2%3Fdistro=bookworm"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/923837?format=api",
            "purl": "pkg:deb/debian/golang-1.24@1.24.4-1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1aty-87pz-5yb8"
                },
                {
                    "vulnerability": "VCID-254d-pjst-c7hx"
                },
                {
                    "vulnerability": "VCID-3nqb-6mna-jyb4"
                },
                {
                    "vulnerability": "VCID-5n8q-zcds-gyen"
                },
                {
                    "vulnerability": "VCID-5q9b-a7c4-1yht"
                },
                {
                    "vulnerability": "VCID-7n3z-vwk2-3ydr"
                },
                {
                    "vulnerability": "VCID-9ky3-s2vk-cuge"
                },
                {
                    "vulnerability": "VCID-br2f-7ux9-hkhg"
                },
                {
                    "vulnerability": "VCID-bv1f-bee8-cbek"
                },
                {
                    "vulnerability": "VCID-csmt-e61b-tued"
                },
                {
                    "vulnerability": "VCID-dp1t-v58b-43du"
                },
                {
                    "vulnerability": "VCID-dtt9-gmqf-nbaf"
                },
                {
                    "vulnerability": "VCID-eyev-qpgs-hfbx"
                },
                {
                    "vulnerability": "VCID-hay4-q9m3-ekdj"
                },
                {
                    "vulnerability": "VCID-je6z-v5qw-ufew"
                },
                {
                    "vulnerability": "VCID-mvsr-c2yh-mbdq"
                },
                {
                    "vulnerability": "VCID-q9yj-ze4x-qyfr"
                },
                {
                    "vulnerability": "VCID-rvbr-nser-sfe7"
                },
                {
                    "vulnerability": "VCID-sb3w-x3yv-ffft"
                },
                {
                    "vulnerability": "VCID-t2dr-6dz3-7qgt"
                },
                {
                    "vulnerability": "VCID-usyf-s559-pkgx"
                },
                {
                    "vulnerability": "VCID-wchc-as62-1fae"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.4-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/923835?format=api",
            "purl": "pkg:deb/debian/golang-1.24@1.24.13-2?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.13-2%3Fdistro=trixie"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/373180?format=api",
            "purl": "pkg:alpm/archlinux/go@1.24.3-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-7ym3-nkc7-93dw"
                },
                {
                    "vulnerability": "VCID-jsz8-cdt5-27f6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/go@1.24.3-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/90094?format=api",
            "purl": "pkg:rpm/redhat/golang@1.24.4-1?arch=el9_6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-7ym3-nkc7-93dw"
                },
                {
                    "vulnerability": "VCID-jsz8-cdt5-27f6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.24.4-1%3Farch=el9_6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/90095?format=api",
            "purl": "pkg:rpm/redhat/golang@1.24.4-1?arch=el10_0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-7ym3-nkc7-93dw"
                },
                {
                    "vulnerability": "VCID-jsz8-cdt5-27f6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.24.4-1%3Farch=el10_0"
        }
    ],
    "references": [
        {
            "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-22874.json",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
                }
            ],
            "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-22874.json"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-22874",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00025",
                    "scoring_system": "epss",
                    "scoring_elements": "0.06899",
                    "published_at": "2026-04-02T12:55:00Z"
                },
                {
                    "value": "0.00025",
                    "scoring_system": "epss",
                    "scoring_elements": "0.06949",
                    "published_at": "2026-04-04T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22516",
                    "published_at": "2026-05-07T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22825",
                    "published_at": "2026-04-11T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22787",
                    "published_at": "2026-04-12T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22731",
                    "published_at": "2026-04-13T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22747",
                    "published_at": "2026-04-16T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22742",
                    "published_at": "2026-04-18T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22701",
                    "published_at": "2026-04-21T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22539",
                    "published_at": "2026-04-24T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22531",
                    "published_at": "2026-04-26T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22529",
                    "published_at": "2026-04-29T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22433",
                    "published_at": "2026-05-05T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22676",
                    "published_at": "2026-04-07T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22752",
                    "published_at": "2026-04-08T12:55:00Z"
                },
                {
                    "value": "0.00076",
                    "scoring_system": "epss",
                    "scoring_elements": "0.22803",
                    "published_at": "2026-04-09T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-22874"
        },
        {
            "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
                }
            ],
            "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
        },
        {
            "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1107364",
            "reference_id": "1107364",
            "reference_type": "",
            "scores": [],
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1107364"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2372320",
            "reference_id": "2372320",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2372320"
        },
        {
            "reference_url": "https://go.dev/cl/670375",
            "reference_id": "670375",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-11T17:45:40Z/"
                }
            ],
            "url": "https://go.dev/cl/670375"
        },
        {
            "reference_url": "https://go.dev/issue/73612",
            "reference_id": "73612",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-11T17:45:40Z/"
                }
            ],
            "url": "https://go.dev/issue/73612"
        },
        {
            "reference_url": "https://security.archlinux.org/ASA-202506-4",
            "reference_id": "ASA-202506-4",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-202506-4"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-2896",
            "reference_id": "AVG-2896",
            "reference_type": "",
            "scores": [
                {
                    "value": "Medium",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-2896"
        },
        {
            "reference_url": "https://pkg.go.dev/vuln/GO-2025-3749",
            "reference_id": "GO-2025-3749",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-11T17:45:40Z/"
                }
            ],
            "url": "https://pkg.go.dev/vuln/GO-2025-3749"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:10676",
            "reference_id": "RHSA-2025:10676",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:10676"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:10677",
            "reference_id": "RHSA-2025:10677",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:10677"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:13931",
            "reference_id": "RHSA-2025:13931",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:13931"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:13932",
            "reference_id": "RHSA-2025:13932",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:13932"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:14470",
            "reference_id": "RHSA-2025:14470",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:14470"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:14472",
            "reference_id": "RHSA-2025:14472",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:14472"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:14473",
            "reference_id": "RHSA-2025:14473",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:14473"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:14476",
            "reference_id": "RHSA-2025:14476",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:14476"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:14479",
            "reference_id": "RHSA-2025:14479",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:14479"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:14481",
            "reference_id": "RHSA-2025:14481",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:14481"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:14484",
            "reference_id": "RHSA-2025:14484",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:14484"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:17043",
            "reference_id": "RHSA-2025:17043",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:17043"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:17730",
            "reference_id": "RHSA-2025:17730",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:17730"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:17731",
            "reference_id": "RHSA-2025:17731",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:17731"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:19003",
            "reference_id": "RHSA-2025:19003",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:19003"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2025:19890",
            "reference_id": "RHSA-2025:19890",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2025:19890"
        },
        {
            "reference_url": "https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A",
            "reference_id": "ufZ8WpEsA3A",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-11T17:45:40Z/"
                }
            ],
            "url": "https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 295,
            "name": "Improper Certificate Validation",
            "description": "The product does not validate, or incorrectly validates, a certificate."
        }
    ],
    "exploits": [],
    "severity_range_score": "4.0 - 7.5",
    "exploitability": "0.5",
    "weighted_severity": "6.8",
    "risk_score": 3.4,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jsz8-cdt5-27f6"
}