{
"data": [
{
"attributes": {
"coordinates": [
{
"remedies": [
{
"description": "Upgrade the package version to 5.4.0,6.4.0 to fix this vulnerability",
"details": {
"upgrade_package": "5.4.0,6.4.0"
},
"type": "indeterminate"
}
],
"representations": [
{
"resource_path": ",5.4.0),[6.0.0.pr1,6.4.0)"
}
]
}
],
"created_at": "2022-06-16T13:51:13Z",
"description": "## Overview\n\n\nAffected versions of this package are vulnerable to XML External Entity (XXE) Injection.",
"effective_severity_level": "info",
"problems": [
{
"disclosed_at": "1970-01-01T00:00:00.000Z",
"discovered_at": "1970-01-01T00:00:00.000Z",
"id": "CWE-61",
"source": "CVE",
"updated_at": "1970-01-01T00:00:00.000Z",
"url": "http://example.com"
}
],
"severities": [
{
"level": "medium",
"score": 5.3,
"source": "Snyk",
"type": "primary",
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "4.0"
}
],
"slots": {
"disclosure_time": "2022-06-16T13:51:13Z",
"exploit_details": {
"maturity_levels": [
{
"format": "CVSSv4",
"level": "Attacked",
"type": "primary"
}
],
"sources": [
"string"
]
},
"publication_time": "2022-06-16T14:00:24.315507Z",
"references": [
{
"title": "string",
"url": "string"
}
]
},
"title": "XML External Entity (XXE) Injection",
"type": "package_vulnerability",
"updated_at": "2022-06-16T14:00:24.315507Z"
},
"id": "SNYK-JAVA-COMFASTERXMLWOODSTOX-2928754",
"type": "issue"
}
],
"jsonapi": {
"version": "1.0"
},
"links": {
"first": "https://example.com/api/resource?ending_before=v1.eyJpZCI6IjExIn0K",
"last": "https://example.com/api/resource?starting_after=v1.eyJpZCI6IjMwIn0K",
"next": "https://example.com/api/resource?starting_after=v1.eyJpZCI6IjEwIn0K"
},
"meta": {
"match": {
"description": "Package and checksum both match",
"details": {
"checksum": true,
"name_version": true
},
"input": {
"checksum": "sha1:abc123",
"purl": "pkg:maven/com.example/my-package@1.0.0?checksum=sha1:abc123"
},
"type": "full"
},
"package": {
"name": "spring-core",
"namespace": "org.springframework",
"type": "maven",
"url": "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.0.0",
"version": "1.0.0"
}
}
}
